_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9a030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a01003a0800000300000007000000080026006c0900f9560333"], 0x398}}, 0x0) (async)

[ 3077.563065][T32691] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:49:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x300}, 0x0)

11:49:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b00000000003b717a07c6a283ff80a6f584dd2713dcda073e9a285335ae3afadf7b87c95e1336ca043bc6145b9aca45c206a9c085be2161beeb18ee652cbeb8b62e2163c8ad5eb0b98184b5049f6f9445e1e8ff138d7f5ad49c65d52e28a72d598286a6cbf77a2f115755921234b7c9e5542e566023539c39038ccf1878c99a9283071c69e8f6b078ecd6ce7608ffd3a00b7392193f2613b77400f4dbba032cf0b0263c708c68eaafa9bbeeb110b51a6afca1843faf2ca186e5512bb699ac33a4787bfee2acfa348d5cfcd7672ef176885eaf"], 0x40}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, <r4=>0x0}, &(0x7f0000000200)=0x14) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1fd, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}}, 0x40002) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

11:49:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x59a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1000c090)

[ 3078.196804][T32710] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:49:55 executing program 5:
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:49:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x34000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030031", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x59a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1000c090)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x59a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1000c090) (async)

11:49:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x500}, 0x0)

11:49:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b00000000003b717a07c6a283ff80a6f584dd2713dcda073e9a285335ae3afadf7b87c95e1336ca043bc6145b9aca45c206a9c085be2161beeb18ee652cbeb8b62e2163c8ad5eb0b98184b5049f6f9445e1e8ff138d7f5ad49c65d52e28a72d598286a6cbf77a2f115755921234b7c9e5542e566023539c39038ccf1878c99a9283071c69e8f6b078ecd6ce7608ffd3a00b7392193f2613b77400f4dbba032cf0b0263c708c68eaafa9bbeeb110b51a6afca1843faf2ca186e5512bb699ac33a4787bfee2acfa348d5cfcd7672ef176885eaf"], 0x40}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote, <r4=>0x0}, &(0x7f0000000200)=0x14) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1fd, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}}, 0x40002)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

11:49:55 executing program 5:
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:49:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x400300, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300ea", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x600}, 0x0)

11:49:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x59a}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x1000c090) (rerun: 32)

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r5, 0x219, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4004081)

11:49:56 executing program 5:
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

11:49:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030025", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x700}, 0x0)

11:49:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r5, 0x219, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4004081)

11:49:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028000007000000000000007b0000", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:49:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x900}, 0x0)

11:49:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)

11:49:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r5, 0x219, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4004081)

[ 3080.257602][T32766] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:49:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)

11:49:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028000007000000000000007b0000", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:49:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00}, 0x0)

[ 3080.775768][  T313] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:49:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r2, 0x36643000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x2b0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

11:49:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x1c00}, 0x0)

11:49:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028000007000000000000007b0000", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:49:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)

[ 3081.343276][  T329] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:49:58 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r2, 0x36643000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x2b0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

11:49:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300ff", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x23c4}, 0x0)

11:49:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x40854)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)

11:49:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x810, r2, 0x36643000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x2b0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

11:49:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:49:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x40854) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)

11:49:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000}, 0x0)

11:49:59 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:49:59 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/242, 0xf2})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="a96bfe91", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES16=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:49:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:49:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000}, 0x0)

11:49:59 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x40854)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)

11:49:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:00 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3083.213361][  T381] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x60ff}, 0x0)

11:50:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x64, 0x5, "c4acdf24f27a1cbe8ea29a7c95bd9de786ddbe23a71eab300a26f8541a3256d67e22ac07cfbdc627206d3dfc74aa4ef9f697fe1706625f8146bfdda8661fdb5897bb08ec4631a72d040db0532018412bbce51b159289d1d8af0c044de6689d07"}, @ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "7bbc29c052a9c4e1800fd60821932e130b3a4e7a654cd90cee"}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "3388ffe1c82c720cebd24edbb8c8d25534a3f46cb726ddcaf1a4d6e5ba762138e7fb53c2339667b09a33f3506287fd3c4930f566bc101ec6364d06670f8e57faa3514bcb2650e06126a8a1c9f2cedc3f93d4bb5efd97b2c0041b9dc0e675ce264a6d5d97ce0263fb807328cf8acaf95bac09cad14f534e889decb46a69b4232b618dde5c536071f8fdfe6c1b53cd9034d4963e47c29291c86e49a916242436222438b055e028416a67b5"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008094}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)
socketpair(0x86a4e081a38f2d4f, 0xa, 0x7, &(0x7f0000000280)={<r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="080025bd70a0c4efd223b7de39f880f1a89dd66400ffdbdf2549000000"], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0)

11:50:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xc423}, 0x0)

[ 3083.849110][  T392] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/242, 0xf2}) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/242, 0xf2})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="a96bfe91", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES16=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x64, 0x5, "c4acdf24f27a1cbe8ea29a7c95bd9de786ddbe23a71eab300a26f8541a3256d67e22ac07cfbdc627206d3dfc74aa4ef9f697fe1706625f8146bfdda8661fdb5897bb08ec4631a72d040db0532018412bbce51b159289d1d8af0c044de6689d07"}, @ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "7bbc29c052a9c4e1800fd60821932e130b3a4e7a654cd90cee"}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "3388ffe1c82c720cebd24edbb8c8d25534a3f46cb726ddcaf1a4d6e5ba762138e7fb53c2339667b09a33f3506287fd3c4930f566bc101ec6364d06670f8e57faa3514bcb2650e06126a8a1c9f2cedc3f93d4bb5efd97b2c0041b9dc0e675ce264a6d5d97ce0263fb807328cf8acaf95bac09cad14f534e889decb46a69b4232b618dde5c536071f8fdfe6c1b53cd9034d4963e47c29291c86e49a916242436222438b055e028416a67b5"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008094}, 0x20000000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)
socketpair(0x86a4e081a38f2d4f, 0xa, 0x7, &(0x7f0000000280)={<r4=>0xffffffffffffffff}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="080025bd70a0c4efd223b7de39f880f1a89dd66400ffdbdf2549000000"], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0)

11:50:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:01 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)

11:50:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x30000}, 0x0)

11:50:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x138, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x64, 0x5, "c4acdf24f27a1cbe8ea29a7c95bd9de786ddbe23a71eab300a26f8541a3256d67e22ac07cfbdc627206d3dfc74aa4ef9f697fe1706625f8146bfdda8661fdb5897bb08ec4631a72d040db0532018412bbce51b159289d1d8af0c044de6689d07"}, @ETHTOOL_A_BITSET_VALUE={0x1d, 0x4, "7bbc29c052a9c4e1800fd60821932e130b3a4e7a654cd90cee"}, @ETHTOOL_A_BITSET_MASK={0xae, 0x5, "3388ffe1c82c720cebd24edbb8c8d25534a3f46cb726ddcaf1a4d6e5ba762138e7fb53c2339667b09a33f3506287fd3c4930f566bc101ec6364d06670f8e57faa3514bcb2650e06126a8a1c9f2cedc3f93d4bb5efd97b2c0041b9dc0e675ce264a6d5d97ce0263fb807328cf8acaf95bac09cad14f534e889decb46a69b4232b618dde5c536071f8fdfe6c1b53cd9034d4963e47c29291c86e49a916242436222438b055e028416a67b5"}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008094}, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)
socketpair(0x86a4e081a38f2d4f, 0xa, 0x7, &(0x7f0000000280)={<r4=>0xffffffffffffffff}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="080025bd70a0c4efd223b7de39f880f1a89dd66400ffdbdf2549000000"], 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x0)

[ 3084.614591][  T409] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:01 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000140)=""/242, 0xf2}) (async)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="a96bfe91", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES16=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030003", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0)

11:50:02 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r7, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cd761428f0beb4bf21cbf14000400776731000000000000000000000000002c21406e9243093f81a58af40fcc218f757d977dda9a025d10ea670b977bf05d834d1c57fac0325e7f183599a0cea9e8383fc14afe1000e368eb9a2f1b868289fcda26e1a40604544e8718"], 0x5c}}, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xcfe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008051)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x13}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

11:50:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000040))

11:50:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030003", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x400300}, 0x0)

11:50:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x45000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:02 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r1=>0x0})
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0)

11:50:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="9803000e", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x48000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, <r3=>0xffffffffffffffff}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r7, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cd761428f0beb4bf21cbf14000400776731000000000000000000000000002c21406e9243093f81a58af40fcc218f757d977dda9a025d10ea670b977bf05d834d1c57fac0325e7f183599a0cea9e8383fc14afe1000e368eb9a2f1b868289fcda26e1a40604544e8718"], 0x5c}}, 0x0)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xcfe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008051)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x13}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

11:50:03 executing program 3:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000040))

11:50:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0)

11:50:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030003", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x5c000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0)

11:50:04 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r1=>0x0}) (async)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x60000000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80000, 0x0, <r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r7, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cd761428f0beb4bf21cbf14000400776731000000000000000000000000002c21406e9243093f81a58af40fcc218f757d977dda9a025d10ea670b977bf05d834d1c57fac0325e7f183599a0cea9e8383fc14afe1000e368eb9a2f1b868289fcda26e1a40604544e8718"], 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r7, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cd761428f0beb4bf21cbf14000400776731000000000000000000000000002c21406e9243093f81a58af40fcc218f757d977dda9a025d10ea670b977bf05d834d1c57fac0325e7f183599a0cea9e8383fc14afe1000e368eb9a2f1b868289fcda26e1a40604544e8718"], 0x5c}}, 0x0)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r11, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xcfe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008051)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x13}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x13}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000)

11:50:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x84}]}]}, 0x28}}, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000000040))

[ 3087.317856][  T477] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xa9260000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0)

11:50:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030030", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:04 executing program 3:
recvfrom$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x2}, 0xffffffffffffffc1)

11:50:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32bdce1bca78689877c2bad79d2cdaec83d4fb8700a7c49d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008001}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="40ed0000", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:50:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0)

11:50:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:05 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r1=>0x0}) (async)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r1, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:05 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x7, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000a00)=""/4096, 0x3c, 0x1000, 0x1}, 0x20)

11:50:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32bdce1bca78689877c2bad79d2cdaec83d4fb8700a7c49d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008001}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="40ed0000", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

[ 3088.462987][  T508] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0)

11:50:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xff600000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:05 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x0, 0x3, &(0x7f0000000340)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32bdce1bca78689877c2bad79d2cdaec83d4fb8700a7c49d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008001}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="40ed0000", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x7c, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "32bdce1bca78689877c2bad79d2cdaec83d4fb8700a7c49d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008001}, 0x800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="40ed0000", @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0) (async)

11:50:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0)

11:50:06 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x23}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3089.084475][  T526] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000001005e0000002400238008000b000000000006001200f7ff0000060001002a00000006000d0007000000"], 0x4c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x24000000)

11:50:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x8000000}, 0x0)

11:50:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:06 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xef, &(0x7f0000000140)=""/239, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 3089.704465][  T539] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

[ 3089.879914][  T547] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0)

11:50:07 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=@framed={{0x18, 0xc}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xef, &(0x7f0000000140)=""/239, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:07 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000001005e0000002400238008000b000000000006001200f7ff0000060001002a00000006000d0007000000"], 0x4c}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000001005e0000002400238008000b000000000006001200f7ff0000060001002a00000006000d0007000000"], 0x4c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x24000000)

11:50:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="01002805702a956702d1963a00fcdb04250113a912c8c957b2310ffd690389977bb25ff38274f37605c8a01619edafe2c0b9140bb42ca271381d670a33ad4213a29a9c5282c6db0cb15f12b621bdce553fe52d73ddcedc4652e302c0dce0c8c307d0a41e2a2204f8d643a34090e498dace1488f8d76d0a292ab363139c93a6aa54d0649df869027b7ba03b0e5d101781eeb8f1fbca719d50e03aa4975acffc511dbab15f9bb3852c58b050cf9b3a8c5a6660f18a94bb92de34623a1fa8cca788a0fc65224eee54b1661f642c03cc7fd6d55be3399d5cf6bb846f9902dcb1fad96a9e99dbfa32207d4bcd6dabfc95e11faeea1c988a6063a604f938852402bb92aa7d8a41227c18228c", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

[ 3090.188593][  T551] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:07 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

11:50:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf000000}, 0x0)

[ 3090.527192][  T562] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000001005e0000002400238008000b000000000006001200f7ff0000060001002a00000006000d0007000000"], 0x4c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x24000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0c009900000001005e0000002400238008000b000000000006001200f7ff0000060001002a00000006000d0007000000"], 0x4c}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async)
sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x24000000) (async)

11:50:07 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

[ 3090.723774][  T565] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xf00, 0x8, 0x0, 0x1}, 0x48)

11:50:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x1c000000}, 0x0)

11:50:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff94b955a48e200f43de2358"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8094)

[ 3091.232549][  T583] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000b46857fcc2ab925508000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:08 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x30000000}, 0x0)

11:50:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3091.768741][  T594] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff94b955a48e200f43de2358"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8094)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ftruncate(r0, 0x7) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff94b955a48e200f43de2358"], 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}}) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8094) (async)

11:50:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000b46857fcc2ab925508000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:09 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@alu={0x7, 0x1, 0x0, 0x0, 0xa}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x60000000}, 0x0)

11:50:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3092.348335][  T613] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000b46857fcc2ab925508000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:09 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x24}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r0, 0x7)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff94b955a48e200f43de2358"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}})
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8094)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ftruncate(r0, 0x7) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff94b955a48e200f43de2358"], 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'pimreg0\x00', {0x2, 0x0, @broadcast}}) (async)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x8094) (async)

11:50:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xc4230000}, 0x0)

11:50:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="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"/342], 0x398}}, 0x0)

11:50:10 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@kfunc]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xef, &(0x7f0000000140)=""/239, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0)

11:50:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x80000)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008000}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:10 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e80080057001b0a000004006c0005000700000000000000eb08b47b56387e18bca3516a7799e6b53ca4aff3ed57b12b2c27f7c1c66e0e70070300b1f61df111a9c028a2ef7cb9b29c358f5f9b8999f408e91af32b87f68df90063fe12257f36953357050003034bda45607131f13d48b07c4bb84fbd117452338111361a6be007a857ed1e393a78533b13edbdf2ddd1579787378386e1d1905195f6853abbd43f12c61de89dc34a9a9137285d78e3c3c967db252212e60ef6da84cc7c3e19c3036289bc6e689d929a645a80a9523e5cc7f62765548a521508d173887ce38184beeb39063287329653ecc63334576c91ca50f463eb35e08d55cdb0df7b42ed7368ae93ae03d0654e494501b9c4f5a1846c49539105dba6d7c89d58345259e38b3d88555982c166be7a308b203e2617a1c865fd0405bbbc88f2faa1aec8b0063819f6173cf9e78b5e00"/342], 0x398}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="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"/342], 0x398}}, 0x0)

11:50:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xff600000}, 0x0)

[ 3093.838954][  T649] __nla_validate_parse: 3 callbacks suppressed
[ 3093.839033][  T649] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3093.915880][  T653] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3093.967572][  T654] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:11 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:11 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="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"/342], 0x398}}, 0x0)

11:50:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0)

[ 3094.403685][  T663] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0xb}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:11 executing program 3:
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000780), 0x10)

[ 3094.510856][  T666] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x80000)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008000}, 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0)

11:50:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000080)=0x20)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)=""/43, 0x2b})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r8, 0x5}, &(0x7f0000000080)=0x8)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080600000000000000006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:12 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x1, 0x7}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000240)=""/208, 0x34, 0xd0, 0x1}, 0x20)

[ 3095.006062][  T675] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x60ffffffffff}, 0x0)

11:50:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x80000)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10008000}, 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0xe}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:12 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xef, &(0x7f0000000140)=""/239, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 3095.595241][  T691] netlink: 888 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000000000}, 0x0)

11:50:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0xf}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:13 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x7, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x38}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xef, &(0x7f0000000140)=""/239, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) (async)
shutdown(r6, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000080)=0x20) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)=""/43, 0x2b}) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r8, 0x5}, &(0x7f0000000080)=0x8)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080600000000000000006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="ff0b0000000000002e2f663447653000"])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x200008c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

[ 3096.134823][  T706] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0)

11:50:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x10}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:13 executing program 3:
socketpair(0x2, 0x2, 0x1, &(0x7f00000001c0))

11:50:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="ff0b0000000000002e2f663447653000"])
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x200008c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000080)=0x20)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)=""/43, 0x2b})
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r8, 0x5}, &(0x7f0000000080)=0x8)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080600000000000000006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) (async)
shutdown(r6, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async)
socket$inet(0x2, 0x80001, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, &(0x7f0000000080)=0x20) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000180)={&(0x7f00000000c0), &(0x7f0000000140)=""/43, 0x2b}) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={r8, 0x5}, &(0x7f0000000080)=0x8) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080600000000000000006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

[ 3096.858131][  T728] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0)

11:50:14 executing program 3:
r0 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000080))

11:50:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r0, @ANYBLOB="ff0b0000000000002e2f663447653000"]) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x200008c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

[ 3097.388727][  T746] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:14 executing program 3:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000006e40)={0x2020}, 0xfffffffffffffdd3)

11:50:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0)

11:50:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x65}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000000)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x0, 0x0, {0x6, 0x1, 0x0, 0x2ff, 0x0, 0x1, 0x1}, 0x8, 0xafe, 0x1}}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r1 = memfd_secret(0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1406, 0x0, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044)

11:50:14 executing program 3:
write$qrtrtun(0xffffffffffffffff, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000024c0)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
lstat(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0)

11:50:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0)

11:50:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x65}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000000) (async)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x0, 0x0, {0x6, 0x1, 0x0, 0x2ff, 0x0, 0x1, 0x1}, 0x8, 0xafe, 0x1}}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async)
r1 = memfd_secret(0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x13}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1406, 0x0, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1406, 0x0, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044) (async)

11:50:15 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0)

11:50:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0)

11:50:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x65}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x24000000)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x34}}}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x2, 0x0, 0x0, {0x6, 0x1, 0x0, 0x2ff, 0x0, 0x1, 0x1}, 0x8, 0xafe, 0x1}}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async)
r1 = memfd_secret(0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x14}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:15 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000200)=[{&(0x7f00000026c0)=""/4109, 0x100d}], 0x1, 0x2a, 0x0)

11:50:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1406, 0x0, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044)

11:50:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0)

[ 3099.063438][  T793] __nla_validate_parse: 4 callbacks suppressed
[ 3099.063517][  T793] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @loopback, @local}, &(0x7f0000000100)=0xc)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:16 executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003b80), 0x0, 0x0)
fcntl$getownex(r0, 0x10, 0x0)

11:50:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8080)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="240038559b80f623ae31000006001200ffff0000080013fffffffffff6001b00001f490000002a6c80aafa00a809"], 0x40}}, 0x0)

11:50:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0)

[ 3099.646426][  T805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3099.709052][  T808] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:16 executing program 3:
openat$fuse(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)

11:50:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @loopback, @local}, &(0x7f0000000100)=0xc)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) (async, rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="240038559b80f623ae31000006001200ffff0000080013fffffffffff6001b00001f490000002a6c80aafa00a809"], 0x40}}, 0x0) (rerun: 64)

11:50:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x16}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0)

[ 3100.260127][  T819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:17 executing program 3:
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)

[ 3100.307135][  T822] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async, rerun: 32)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r3=>0x0, @loopback, @local}, &(0x7f0000000100)=0xc) (rerun: 32)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x800)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x17}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x800000000000000}, 0x0)

11:50:17 executing program 3:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0)

[ 3100.853938][  T833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3100.989597][  T838] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0)

11:50:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x18}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:18 executing program 3:
r0 = fsopen(&(0x7f0000000040)='ocfs2\x00', 0x0)
fsmount(r0, 0x0, 0x0)

11:50:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="240038559b80f623ae31000006001200ffff0000080013fffffffffff6001b00001f490000002a6c80aafa00a809"], 0x40}}, 0x0)

11:50:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x398}}, 0x20040025)

11:50:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf00000000000000}, 0x0)

11:50:18 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020)

[ 3101.620523][  T853] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x19}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x398}}, 0x20040025)

11:50:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000cf89656ba51c3d96", @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000884000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x24040844)

11:50:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x1c00000000000000}, 0x0)

11:50:19 executing program 3:
openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000022c0), 0x0)

[ 3102.235523][  T872] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x1a}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x3000000000000000}, 0x0)

11:50:19 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x398}}, 0x20040025)

11:50:19 executing program 3:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
fcntl$setpipe(r0, 0x407, 0x0)

[ 3102.907838][  T898] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x1b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:20 executing program 3:
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)

11:50:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x6000000000000000}, 0x0)

11:50:20 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000cf89656ba51c3d96", @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000884000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x24040844)

11:50:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x1c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:20 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001440)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$ppp(r0, &(0x7f0000000040)='*', 0x1)

11:50:20 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x7, 0x400000)
r4 = fcntl$dupfd(r3, 0x406, r2)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
fcntl$setpipe(r4, 0x407, 0x7fff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xc423000000000000}, 0x0)

11:50:21 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000002480)=[{&(0x7f0000002280)=""/177, 0xb1}], 0x1, 0x52, 0x0)

11:50:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x1d}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3104.149130][  T926] __nla_validate_parse: 1 callbacks suppressed
[ 3104.149213][  T926] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000cf89656ba51c3d96", @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000884000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x24040844)

[ 3104.294933][  T929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0)

11:50:21 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x11, r0, 0x0)

11:50:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x21}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3104.705429][  T945] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x78}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x68}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe, 0x5b, "178cb8d69ab91e864743"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfc01}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "0a8bd181563a86e340cc818798def5db39678034c2ee2fa2c212670411cbffe29a482c8995f3c11d02845c16c82734144c36152301813716822d30533d849de1bc6247f6649e5d60276b4a035a4de1123d42aa9d5eeef3"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x38, 0x5b, "cf4ed5a1b7aadd6e1c07d4725ced464bd41fc99b27d97e0e5ad2138be65d740930fbcfbd10dc66253f51c1d66596435a8eed5a55"}, @NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "9105b3b3be47d513cd43be38d3fb975cf61a6f434195f4f5f3fc3720ff86e3621d3016ff99cc97"}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004)

11:50:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:22 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x7, 0x400000)
r4 = fcntl$dupfd(r3, 0x406, r2)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
fcntl$setpipe(r4, 0x407, 0x7fff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
syz_open_dev$dmmidi(&(0x7f0000000040), 0x7, 0x400000) (async)
fcntl$dupfd(r3, 0x406, r2) (async)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
fcntl$setpipe(r4, 0x407, 0x7fff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

11:50:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

11:50:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x25}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:22 executing program 3:
syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x294c917a4dd8550b}, &(0x7f00000002c0), &(0x7f0000000300))

[ 3105.331950][  T957] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x78}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x68}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe, 0x5b, "178cb8d69ab91e864743"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfc01}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "0a8bd181563a86e340cc818798def5db39678034c2ee2fa2c212670411cbffe29a482c8995f3c11d02845c16c82734144c36152301813716822d30533d849de1bc6247f6649e5d60276b4a035a4de1123d42aa9d5eeef3"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x38, 0x5b, "cf4ed5a1b7aadd6e1c07d4725ced464bd41fc99b27d97e0e5ad2138be65d740930fbcfbd10dc66253f51c1d66596435a8eed5a55"}, @NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "9105b3b3be47d513cd43be38d3fb975cf61a6f434195f4f5f3fc3720ff86e3621d3016ff99cc97"}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004)

[ 3105.565705][  T967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0)

11:50:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:22 executing program 3:
pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLOPEN(r0, 0x0, 0x0)

[ 3105.944136][  T984] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = syz_open_dev$dmmidi(&(0x7f0000000040), 0x7, 0x400000)
r4 = fcntl$dupfd(r3, 0x406, r2)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
fcntl$setpipe(r4, 0x407, 0x7fff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
syz_open_dev$dmmidi(&(0x7f0000000040), 0x7, 0x400000) (async)
fcntl$dupfd(r3, 0x406, r2) (async)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
fcntl$setpipe(r4, 0x407, 0x7fff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

11:50:23 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x78}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x78}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x68}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe, 0x5b, "178cb8d69ab91e864743"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfc01}, @NL80211_ATTR_FRAME_MATCH={0x5b, 0x5b, "0a8bd181563a86e340cc818798def5db39678034c2ee2fa2c212670411cbffe29a482c8995f3c11d02845c16c82734144c36152301813716822d30533d849de1bc6247f6649e5d60276b4a035a4de1123d42aa9d5eeef3"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x38, 0x5b, "cf4ed5a1b7aadd6e1c07d4725ced464bd41fc99b27d97e0e5ad2138be65d740930fbcfbd10dc66253f51c1d66596435a8eed5a55"}, @NL80211_ATTR_FRAME_MATCH={0x2b, 0x5b, "9105b3b3be47d513cd43be38d3fb975cf61a6f434195f4f5f3fc3720ff86e3621d3016ff99cc97"}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004)

11:50:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:23 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

11:50:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0xffffffffff600000}, 0x0)

11:50:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x27}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3106.379256][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3106.487681][ T1004] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3106.625948][ T1208] ieee802154 phy0 wpan0: encryption failed: -22
[ 3106.632897][ T1208] ieee802154 phy1 wpan1: encryption failed: -22
11:50:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r1, @ANYRES32=r3, @ANYRES32], 0x40}}, 0x0)

11:50:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r3, 0x0, r3)
write$binfmt_elf64(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x53, 0x40, 0xff, 0x3, 0x3e, 0x1, 0xb6, 0x40, 0x2f4, 0xfffffffe, 0x2, 0x38, 0x2, 0x3, 0x1ff, 0x80}, [{0x4, 0x7, 0x1ff, 0x80, 0x8, 0x0, 0xffffffff}], "fa9c11f6428800fdba8656e62967950cf84a239e84907d51c59732", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x993)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:23 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0)

11:50:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:50:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x28}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0}) (async, rerun: 32)
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r1, @ANYRES32=r3, @ANYRES32], 0x40}}, 0x0)

[ 3107.122391][ T1021] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3107.140876][ T1024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:24 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0)

11:50:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0)

11:50:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x2b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYRES8=r1, @ANYRES32=r3, @ANYRES32], 0x40}}, 0x0)

11:50:24 executing program 3:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
fchown(r0, 0x0, 0xffffffffffffffff)

11:50:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r3, 0x0, r3) (async, rerun: 32)
write$binfmt_elf64(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x53, 0x40, 0xff, 0x3, 0x3e, 0x1, 0xb6, 0x40, 0x2f4, 0xfffffffe, 0x2, 0x38, 0x2, 0x3, 0x1ff, 0x80}, [{0x4, 0x7, 0x1ff, 0x80, 0x8, 0x0, 0xffffffff}], "fa9c11f6428800fdba8656e62967950cf84a239e84907d51c59732", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x993) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0)

11:50:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800d4044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES64=r6, @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000c044)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x4c}}, 0x0)

11:50:25 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000), 0x0)

11:50:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x2e}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300ff", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

11:50:25 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0)

11:50:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x30}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300ff", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 64)
fcntl$dupfd(r3, 0x0, r3) (rerun: 64)
write$binfmt_elf64(r3, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x53, 0x40, 0xff, 0x3, 0x3e, 0x1, 0xb6, 0x40, 0x2f4, 0xfffffffe, 0x2, 0x38, 0x2, 0x3, 0x1ff, 0x80}, [{0x4, 0x7, 0x1ff, 0x80, 0x8, 0x0, 0xffffffff}], "fa9c11f6428800fdba8656e62967950cf84a239e84907d51c59732", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x993) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0)

11:50:26 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
fcntl$addseals(r0, 0x409, 0x0)

11:50:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x31}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800d4044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES64=r6, @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000c044)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x4c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r6, 0x0, r6) (async)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800d4044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES64=r6, @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000c044) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x4c}}, 0x0) (async)

11:50:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0)

11:50:26 executing program 3:
setreuid(0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

[ 3109.682758][ T1085] __nla_validate_parse: 3 callbacks suppressed
[ 3109.682833][ T1085] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3109.722301][ T1084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="9803007f", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800d4044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r7, @ANYRES64=r6, @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000c044)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x4c, r1, 0x800, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x4c}}, 0x0)

11:50:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0)

11:50:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="55000a0502000800030602000000000000ee6fe8e1fcf6fd38b53f5a6cb01ddffc8dd2428fdc9d35af534481b605587f8ca5de4f00000000", @ANYRES32=r3, @ANYBLOB="04008600081057001b0500190107000000080026006c090000560333"], 0x398}}, 0x8000)

11:50:27 executing program 3:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x0)

11:50:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300f0", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x34}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0)

11:50:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300fd", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

[ 3110.832398][ T1115] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:28 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00), 0x0, 0x0)
getpeername$inet(r0, 0x0, 0x0)

11:50:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="55000a0502000800030602000000000000ee6fe8e1fcf6fd38b53f5a6cb01ddffc8dd2428fdc9d35af534481b605587f8ca5de4f00000000", @ANYRES32=r3, @ANYBLOB="04008600081057001b0500190107000000080026006c090000560333"], 0x398}}, 0x8000)

11:50:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x35}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0)

[ 3111.313483][ T1126] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:28 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00000003c0)="1aaccc0b36637ddc", 0x8)

11:50:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="980300ff", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="55000a0502000800030602000000000000ee6fe8e1fcf6fd38b53f5a6cb01ddffc8dd2428fdc9d35af534481b605587f8ca5de4f00000000", @ANYRES32=r3, @ANYBLOB="04008600081057001b0500190107000000080026006c090000560333"], 0x398}}, 0x8000)

11:50:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x36}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x40, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x23, 0x2a, [@challenge={0x10, 0x1, 0xaf}, @ht={0x2d, 0x1a, {0x840, 0x1, 0x6, 0x0, {0x3, 0x2df, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x2, 0x4}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8000}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x24, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x20}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x24}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x7f}}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8880}, 0x4000805)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x11c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @val={0xc, 0x99, {0x9a, 0x29}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc7209cb05d7141f28b8d55b8cb99640afe37d6266915bf8"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebbf6340cbda17bc09b7a9971d3700c28a56c433c45ce398"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41ecd9acbf1ab6f2050b0bc7e7ae293eb53cdfc6feece951"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f57d561fa2461f23e468125f4dcff0dab2ebab4cc36312a6"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x20000004)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000015c0)={&(0x7f0000000cc0), 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)={0x144, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x144}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'erspan0\x00', <r11=>0x0, 0x7, 0x10, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @lsrr={0x83, 0x17, 0x50, [@private=0xa010100, @loopback, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101]}, @noop, @generic={0x89, 0x6, "6b9cfcbc"}, @noop, @timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0xd, [{@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x8}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', <r13=>0x0, 0x29, 0x0, 0x0, 0xac5, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x7800, 0x5e0, 0x7}})
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000780)={@rand_addr, <r14=>0x0}, &(0x7f00000007c0)=0x14)
getpeername$packet(r2, &(0x7f0000000800)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'syztnl2\x00', <r16=>0x0, 0x0, 0x700, 0x7, 0x6, {{0x28, 0x4, 0x0, 0x38, 0xa0, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x2e, 0x3, [{0x7, 0xa, "3a5b409524efc88e"}, {0x6, 0xd, "2ef714ea48a75bac9b0014"}, {0x0, 0xe, "20936c1c06015c6c75e2ba45"}, {0x1, 0x3, "e3"}]}, @timestamp_prespec={0x44, 0x2c, 0x9c, 0x3, 0x6, [{@multicast1, 0x2}, {@rand_addr=0x64010102, 0x5}, {@remote, 0x7066}, {@loopback, 0x26}, {@local, 0x9}]}, @rr={0x7, 0x7, 0x14, [@multicast2]}, @ssrr={0x89, 0x7, 0xd6, [@empty]}, @lsrr={0x83, 0x7, 0x8d, [@multicast1]}, @lsrr={0x83, 0x1b, 0xa, [@remote, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2c0, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa00}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6800e0c0}}}]}}, {{0x8, 0x1, r15}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4055}, 0x30070)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000480)=0x10000000)
r17 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000009580)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r18, 0x1be49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r18}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@getlink={0x50, 0x12, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x1040}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_LINK={0x8, 0x5, r18}, @IFLA_BROADCAST={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYBLOB="0100000000000000000044be415bcf8eb247", @ANYRES32=r8, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:50:28 executing program 3:
openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)

11:50:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf}, 0x0)

[ 3111.831798][ T1139] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}}, 0x4008800)

11:50:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x37}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1c}, 0x0)

11:50:29 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fchown(r0, 0x0, 0x0)

11:50:29 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x40, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x23, 0x2a, [@challenge={0x10, 0x1, 0xaf}, @ht={0x2d, 0x1a, {0x840, 0x1, 0x6, 0x0, {0x3, 0x2df, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x2, 0x4}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8000}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x24, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x20}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x24}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x7f}}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8880}, 0x4000805)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x11c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @val={0xc, 0x99, {0x9a, 0x29}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc7209cb05d7141f28b8d55b8cb99640afe37d6266915bf8"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebbf6340cbda17bc09b7a9971d3700c28a56c433c45ce398"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41ecd9acbf1ab6f2050b0bc7e7ae293eb53cdfc6feece951"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f57d561fa2461f23e468125f4dcff0dab2ebab4cc36312a6"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x11c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @val={0xc, 0x99, {0x9a, 0x29}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc7209cb05d7141f28b8d55b8cb99640afe37d6266915bf8"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebbf6340cbda17bc09b7a9971d3700c28a56c433c45ce398"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41ecd9acbf1ab6f2050b0bc7e7ae293eb53cdfc6feece951"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f57d561fa2461f23e468125f4dcff0dab2ebab4cc36312a6"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x20000004)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000015c0)={&(0x7f0000000cc0), 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)={0x144, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x144}}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000015c0)={&(0x7f0000000cc0), 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)={0x144, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x144}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'erspan0\x00', <r11=>0x0, 0x7, 0x10, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @lsrr={0x83, 0x17, 0x50, [@private=0xa010100, @loopback, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101]}, @noop, @generic={0x89, 0x6, "6b9cfcbc"}, @noop, @timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0xd, [{@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x8}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', <r13=>0x0, 0x29, 0x0, 0x0, 0xac5, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x7800, 0x5e0, 0x7}})
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000780)={@rand_addr, <r14=>0x0}, &(0x7f00000007c0)=0x14)
getpeername$packet(r2, &(0x7f0000000800)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'syztnl2\x00', <r16=>0x0, 0x0, 0x700, 0x7, 0x6, {{0x28, 0x4, 0x0, 0x38, 0xa0, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x2e, 0x3, [{0x7, 0xa, "3a5b409524efc88e"}, {0x6, 0xd, "2ef714ea48a75bac9b0014"}, {0x0, 0xe, "20936c1c06015c6c75e2ba45"}, {0x1, 0x3, "e3"}]}, @timestamp_prespec={0x44, 0x2c, 0x9c, 0x3, 0x6, [{@multicast1, 0x2}, {@rand_addr=0x64010102, 0x5}, {@remote, 0x7066}, {@loopback, 0x26}, {@local, 0x9}]}, @rr={0x7, 0x7, 0x14, [@multicast2]}, @ssrr={0x89, 0x7, 0xd6, [@empty]}, @lsrr={0x83, 0x7, 0x8d, [@multicast1]}, @lsrr={0x83, 0x1b, 0xa, [@remote, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2c0, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa00}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6800e0c0}}}]}}, {{0x8, 0x1, r15}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4055}, 0x30070)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000480)=0x10000000) (async)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000480)=0x10000000)
r17 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000009580)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r18, 0x1be49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r18}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@getlink={0x50, 0x12, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x1040}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_LINK={0x8, 0x5, r18}, @IFLA_BROADCAST={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@getlink={0x50, 0x12, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x1040}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_LINK={0x8, 0x5, r18}, @IFLA_BROADCAST={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYBLOB="0100000000000000000044be415bcf8eb247", @ANYRES32=r8, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

[ 3112.470535][ T1156] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}}, 0x4008800) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}}, 0x4008800)

11:50:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:30 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e)

[ 3112.869218][ T1168] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x0)

[ 3112.942997][ T1169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x88, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x40, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x30, 0x12, 0x0, 0x1, [@NL80211_ATTR_IE={0x23, 0x2a, [@challenge={0x10, 0x1, 0xaf}, @ht={0x2d, 0x1a, {0x840, 0x1, 0x6, 0x0, {0x3, 0x2df, 0x0, 0x6, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x300, 0x2, 0x4}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8000}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x34, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x24, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x20}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x24}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x7f}}]}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8880}, 0x4000805) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x11c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5}, @val={0x8}, @val={0xc, 0x99, {0x9a, 0x29}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc7209cb05d7141f28b8d55b8cb99640afe37d6266915bf8"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebbf6340cbda17bc09b7a9971d3700c28a56c433c45ce398"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "41ecd9acbf1ab6f2050b0bc7e7ae293eb53cdfc6feece951"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f57d561fa2461f23e468125f4dcff0dab2ebab4cc36312a6"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}]}, 0x11c}, 0x1, 0x0, 0x0, 0x804}, 0x20000004) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$team(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_GET(r9, &(0x7f00000015c0)={&(0x7f0000000cc0), 0xc, &(0x7f0000001580)={&(0x7f0000000fc0)={0x144, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x144}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000580)={'erspan0\x00', <r11=>0x0, 0x7, 0x10, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x6, 0x48, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@noop, @lsrr={0x83, 0x17, 0x50, [@private=0xa010100, @loopback, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010101]}, @noop, @generic={0x89, 0x6, "6b9cfcbc"}, @noop, @timestamp_prespec={0x44, 0x14, 0x54, 0x3, 0xd, [{@private=0xa010100, 0x3}, {@rand_addr=0x64010102, 0x8}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'syztnl0\x00', <r13=>0x0, 0x29, 0x0, 0x0, 0xac5, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x7800, 0x5e0, 0x7}})
getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000780)={@rand_addr, <r14=>0x0}, &(0x7f00000007c0)=0x14) (async)
getpeername$packet(r2, &(0x7f0000000800)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000880)={'syztnl2\x00', <r16=>0x0, 0x0, 0x700, 0x7, 0x6, {{0x28, 0x4, 0x0, 0x38, 0xa0, 0x64, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x2e, 0x3, [{0x7, 0xa, "3a5b409524efc88e"}, {0x6, 0xd, "2ef714ea48a75bac9b0014"}, {0x0, 0xe, "20936c1c06015c6c75e2ba45"}, {0x1, 0x3, "e3"}]}, @timestamp_prespec={0x44, 0x2c, 0x9c, 0x3, 0x6, [{@multicast1, 0x2}, {@rand_addr=0x64010102, 0x5}, {@remote, 0x7066}, {@loopback, 0x26}, {@local, 0x9}]}, @rr={0x7, 0x7, 0x14, [@multicast2]}, @ssrr={0x89, 0x7, 0xd6, [@empty]}, @lsrr={0x83, 0x7, 0x8d, [@multicast1]}, @lsrr={0x83, 0x1b, 0xa, [@remote, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}]}}}}})
sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000980)={0x2c0, r10, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa00}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6800e0c0}}}]}}, {{0x8, 0x1, r15}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4055}, 0x30070) (async)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000480)=0x10000000) (async)
r17 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
getsockname$packet(r17, &(0x7f0000000140)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000009580)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r18, 0x1be49}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r18}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=@getlink={0x50, 0x12, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x1040}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_LINK={0x8, 0x5, r18}, @IFLA_BROADCAST={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYRES64=0x0, @ANYRES16=r1, @ANYBLOB="0100000000000000000044be415bcf8eb247", @ANYRES32=r8, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:50:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x11c}}, 0x4008800)

11:50:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x39}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3113.358585][ T1181] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000106001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:50:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60}, 0x0)

11:50:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x3a}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3113.948257][ T1197] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:31 executing program 3:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
flistxattr(r0, 0x0, 0x0)

11:50:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000106001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000106001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0) (async)

11:50:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0)

11:50:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x3b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:31 executing program 3:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_freezer_state(r0, 0x0, 0x41)

11:50:31 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0)

11:50:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x3d}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:32 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000040), &(0x7f00000000c0)=0x4)

[ 3114.881708][ T1226] __nla_validate_parse: 2 callbacks suppressed
[ 3114.881782][ T1226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000106001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:50:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

[ 3115.205227][ T1232] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/9, 0x9})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x3e}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:32 executing program 3:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0)

11:50:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

[ 3115.523690][ T1240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

[ 3115.774324][ T1251] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:32 executing program 3:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)

11:50:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0)

11:50:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x41}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

[ 3116.226174][ T1263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:33 executing program 3:
openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/class/power_supply', 0x42000, 0x20)

[ 3116.377019][ T1267] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x43}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:33 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r1, 0x0, r1) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/9, 0x9})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0)

11:50:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:33 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)

11:50:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x4b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3116.936257][ T1277] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf00}, 0x0)

11:50:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000180)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/9, 0x9})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:34 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

[ 3117.423547][ T1291] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x4c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3117.465770][ T1293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:34 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1c00}, 0x0)

11:50:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:34 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x23}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x6b}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:35 executing program 3:
memfd_create(&(0x7f0000001280)='\xc1!\\*,,)]-^%C&%\x00', 0x3)

[ 3117.989624][ T1305] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x23c4}, 0x0)

11:50:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r4, 0x0, r4) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x23}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:35 executing program 3:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)

11:50:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x72}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x3000}, 0x0)

11:50:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x23}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:35 executing program 3:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, 0x0)

11:50:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x7a}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x0)

11:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110a00000000000000000200000014000180040001007569703a73797a3200000000"], 0x28}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x288, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x29c8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e6f}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dcc8a67ccf9e21d9cddcb8d6d548bd943db7272ac8ce69b64cecd1e18a24aa5ef4607472"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9844870d65945a90c139c805028b8e86f40eb9887421d4af29"}}, @TIPC_NLA_NODE_ID={0x61, 0x3, "a0194d01ee94fa46feb402a6831bd2aee05fc72cdb03edc4f31bdb30dbc4c4fbefd0daa53816dc1761326a6c5d38d83dc4af709afb213e20ba000bbd13f2eb408d2a4596e56bcfa1d113b27c0a8be82c8fd6711e4c8959420548210938"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "575e6edde473f6d346a4f9c24641e64ac9ddad5fdcdb33c5da27cb4b0b68bc9fc35db5f4a822d0ef0e86c55b7956227e064aa4853be0f05839fa895efd3643017d"}, @TIPC_NLA_NODE_ID={0x73, 0x3, "2daf3676715d1c466a37af127304fdd44635c3ce69421e07dfd18b9e87d0aa8e70a06a64829bcfbedfa6968de0827a22fd15750b9eed18c4ba66497d9a72b40e0c0e1f49f99fe09de9e35371142b643c1fe45f21e05a78c8831205e920e3223fb831a1eb3b752bbdd3442d650b5575"}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000)
socket$caif_stream(0x25, 0x1, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="010400ff369724dbcdc15767915373b997ff99b28a6f428e44f3a59c8134ecd70548381a47d33f7603cda14e31eb799e8ce3eeaf565a56d0d8e84df6c6f5ffcd26ab1592721eba7504d73c6726451a5de6653c41e3f2f50c4a2e405e123ba3fb3fc0f0833fa3a104542e4ed7a23d4721cab16451717b18d64a0e7de89c5431a14ed4ab17ba3e342077544a2c2befd20f3b1aee4fa45c376479ac153b5c349e0a564db9348f4389e7e3d8aff55b00000000000000000000000000000026ec3020", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x398}}, 0x20000040)
socket$nl_generic(0x10, 0x3, 0x10)

11:50:36 executing program 3:
shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000f91000/0x2000)=nil)

11:50:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60ff}, 0x0)

11:50:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x7e}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110a00000000000000000200000014000180040001007569703a73797a3200000000"], 0x28}}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x288, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x29c8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e6f}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dcc8a67ccf9e21d9cddcb8d6d548bd943db7272ac8ce69b64cecd1e18a24aa5ef4607472"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9844870d65945a90c139c805028b8e86f40eb9887421d4af29"}}, @TIPC_NLA_NODE_ID={0x61, 0x3, "a0194d01ee94fa46feb402a6831bd2aee05fc72cdb03edc4f31bdb30dbc4c4fbefd0daa53816dc1761326a6c5d38d83dc4af709afb213e20ba000bbd13f2eb408d2a4596e56bcfa1d113b27c0a8be82c8fd6711e4c8959420548210938"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "575e6edde473f6d346a4f9c24641e64ac9ddad5fdcdb33c5da27cb4b0b68bc9fc35db5f4a822d0ef0e86c55b7956227e064aa4853be0f05839fa895efd3643017d"}, @TIPC_NLA_NODE_ID={0x73, 0x3, "2daf3676715d1c466a37af127304fdd44635c3ce69421e07dfd18b9e87d0aa8e70a06a64829bcfbedfa6968de0827a22fd15750b9eed18c4ba66497d9a72b40e0c0e1f49f99fe09de9e35371142b643c1fe45f21e05a78c8831205e920e3223fb831a1eb3b752bbdd3442d650b5575"}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000)
socket$caif_stream(0x25, 0x1, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110a00000000000000000200000014000180040001007569703a73797a3200000000"], 0x28}}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x288, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x29c8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e6f}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dcc8a67ccf9e21d9cddcb8d6d548bd943db7272ac8ce69b64cecd1e18a24aa5ef4607472"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9844870d65945a90c139c805028b8e86f40eb9887421d4af29"}}, @TIPC_NLA_NODE_ID={0x61, 0x3, "a0194d01ee94fa46feb402a6831bd2aee05fc72cdb03edc4f31bdb30dbc4c4fbefd0daa53816dc1761326a6c5d38d83dc4af709afb213e20ba000bbd13f2eb408d2a4596e56bcfa1d113b27c0a8be82c8fd6711e4c8959420548210938"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "575e6edde473f6d346a4f9c24641e64ac9ddad5fdcdb33c5da27cb4b0b68bc9fc35db5f4a822d0ef0e86c55b7956227e064aa4853be0f05839fa895efd3643017d"}, @TIPC_NLA_NODE_ID={0x73, 0x3, "2daf3676715d1c466a37af127304fdd44635c3ce69421e07dfd18b9e87d0aa8e70a06a64829bcfbedfa6968de0827a22fd15750b9eed18c4ba66497d9a72b40e0c0e1f49f99fe09de9e35371142b643c1fe45f21e05a78c8831205e920e3223fb831a1eb3b752bbdd3442d650b5575"}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000) (async)
socket$caif_stream(0x25, 0x1, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)

11:50:36 executing program 3:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0)
openat$cgroup_freezer_state(r0, &(0x7f0000001040), 0x2, 0x0)

11:50:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc423}, 0x0)

11:50:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="010400ff369724dbcdc15767915373b997ff99b28a6f428e44f3a59c8134ecd70548381a47d33f7603cda14e31eb799e8ce3eeaf565a56d0d8e84df6c6f5ffcd26ab1592721eba7504d73c6726451a5de6653c41e3f2f50c4a2e405e123ba3fb3fc0f0833fa3a104542e4ed7a23d4721cab16451717b18d64a0e7de89c5431a14ed4ab17ba3e342077544a2c2befd20f3b1aee4fa45c376479ac153b5c349e0a564db9348f4389e7e3d8aff55b00000000000000000000000000000026ec3020", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x398}}, 0x20000040) (async)
socket$nl_generic(0x10, 0x3, 0x10)

11:50:37 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async, rerun: 64)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 64)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110a00000000000000000200000014000180040001007569703a73797a3200000000"], 0x28}}, 0x0) (async, rerun: 32)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x288, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x98}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x29c8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e6f}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "dcc8a67ccf9e21d9cddcb8d6d548bd943db7272ac8ce69b64cecd1e18a24aa5ef4607472"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3f}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7fff}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "9844870d65945a90c139c805028b8e86f40eb9887421d4af29"}}, @TIPC_NLA_NODE_ID={0x61, 0x3, "a0194d01ee94fa46feb402a6831bd2aee05fc72cdb03edc4f31bdb30dbc4c4fbefd0daa53816dc1761326a6c5d38d83dc4af709afb213e20ba000bbd13f2eb408d2a4596e56bcfa1d113b27c0a8be82c8fd6711e4c8959420548210938"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "575e6edde473f6d346a4f9c24641e64ac9ddad5fdcdb33c5da27cb4b0b68bc9fc35db5f4a822d0ef0e86c55b7956227e064aa4853be0f05839fa895efd3643017d"}, @TIPC_NLA_NODE_ID={0x73, 0x3, "2daf3676715d1c466a37af127304fdd44635c3ce69421e07dfd18b9e87d0aa8e70a06a64829bcfbedfa6968de0827a22fd15750b9eed18c4ba66497d9a72b40e0c0e1f49f99fe09de9e35371142b643c1fe45f21e05a78c8831205e920e3223fb831a1eb3b752bbdd3442d650b5575"}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000) (async, rerun: 32)
socket$caif_stream(0x25, 0x1, 0x4) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:37 executing program 3:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000002300), 0x632080, 0x0)

11:50:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000}, 0x0)

11:50:37 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000001080))
timer_gettime(0x0, 0x0)

[ 3120.759792][ T1379] __nla_validate_parse: 4 callbacks suppressed
[ 3120.759963][ T1379] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="010400ff369724dbcdc15767915373b997ff99b28a6f428e44f3a59c8134ecd70548381a47d33f7603cda14e31eb799e8ce3eeaf565a56d0d8e84df6c6f5ffcd26ab1592721eba7504d73c6726451a5de6653c41e3f2f50c4a2e405e123ba3fb3fc0f0833fa3a104542e4ed7a23d4721cab16451717b18d64a0e7de89c5431a14ed4ab17ba3e342077544a2c2befd20f3b1aee4fa45c376479ac153b5c349e0a564db9348f4389e7e3d8aff55b00000000000000000000000000000026ec3020", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x398}}, 0x20000040) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="010400ff369724dbcdc15767915373b997ff99b28a6f428e44f3a59c8134ecd70548381a47d33f7603cda14e31eb799e8ce3eeaf565a56d0d8e84df6c6f5ffcd26ab1592721eba7504d73c6726451a5de6653c41e3f2f50c4a2e405e123ba3fb3fc0f0833fa3a104542e4ed7a23d4721cab16451717b18d64a0e7de89c5431a14ed4ab17ba3e342077544a2c2befd20f3b1aee4fa45c376479ac153b5c349e0a564db9348f4389e7e3d8aff55b00000000000000000000000000000026ec3020", @ANYRESDEC=r3, @ANYRESHEX=r2], 0x398}}, 0x20000040)
socket$nl_generic(0x10, 0x3, 0x10)

11:50:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x38}}, 0x0)

11:50:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

11:50:38 executing program 3:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0xeb9468f76165365f, 0x0)

[ 3121.452800][ T1395] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

11:50:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:38 executing program 3:
pipe(&(0x7f0000000380)={<r0=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)

11:50:38 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x38}}, 0x0)

11:50:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

[ 3122.023976][ T1410] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:39 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

11:50:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:39 executing program 3:
openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x1c5900, 0x0)

11:50:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x38}}, 0x0)

11:50:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

[ 3122.618840][ T1426] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x8080}, 0x0)

11:50:39 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
accept$inet(r0, 0x0, 0x0)

11:50:39 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11:50:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

11:50:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:40 executing program 3:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0)

11:50:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

[ 3123.314751][ T1447] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

11:50:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

11:50:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:40 executing program 3:
socket$inet6(0xa, 0x1, 0xf2ea)

[ 3123.728599][ T1452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3123.886996][ T1458] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

11:50:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

11:50:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)

11:50:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:41 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))

11:50:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0)

[ 3124.503521][ T1474] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3124.514369][ T1473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

[ 3125.037291][ T1490] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0)

11:50:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0)

11:50:42 executing program 3:
syz_io_uring_setup(0x78b6, &(0x7f00000000c0), 0x0, 0x0)

11:50:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="070727bd7000fedbdf25100000005800068008000600060000003f00040067636d286165732900000000000000000000000000000000000000000000000017000000333106a49567f1c105c0249b05ce2c8e6eb7e067f90c1f000800010002000000040005001400028008000200040000000800020005000000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x810)

11:50:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0xf}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

[ 3126.016336][ T1510] __nla_validate_parse: 2 callbacks suppressed
[ 3126.016408][ T1510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:43 executing program 3:
add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39]}, &(0x7f00000009c0)={0x0, "81468916e70101b79f708a5eee9f1e979060dbea0a7bef8e9e6130465adb83265574e8849f687178f1190b9de085d21abac68b5cb1b2d05187875f3973ac48d2"}, 0x48, 0xffffffffffffffff)

[ 3126.120442][ T1513] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0)

11:50:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x45}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:43 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x30}}, 0x20000014)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000a41496b0a4b9bd836dc9a91d64a6d1deb980b27b622129d7cd0ea8230ad40f56568ba190eb777abbe2db806f91acd782b0f3d1ae74a379dbbaadd0feeb3799531be28aaeab236a8e878c7dc18d175ff51894cfabb9d5d473dbc686f460659054dc58ec6fef6d37f809b52d6538d4372f96565e8533c793287c7624e916e2b4ce0e680f1f7ae0053055ea9731a870b0a6cf2ad636418e164a154f54126922e027f2b6cb56a3d0551add9341e229515794b6557f6b6ffcd0e82df2f451bf344ced0941afc01bcaafa8cef8311f941bebe4d30796d3419055f60a65c6526c441ec47d39c58e751026f1bc000000", @ANYRES16=r5, @ANYBLOB="20002dbd7000fbdbdf25070000000800050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r9 = fcntl$dupfd(r8, 0x0, r8)
r10 = getuid()
quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000202, r10, &(0x7f0000000480)='./file0\x00')
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

11:50:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:43 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000001800), 0x700, 0x0)

11:50:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0)

11:50:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x48}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:44 executing program 3:
syz_open_dev$usbfs(&(0x7f0000000340), 0x0, 0x6040)

[ 3126.967221][ T1529] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="070727bd7000fedbdf25100000005800068008000600060000003f00040067636d286165732900000000000000000000000000000000000000000000000017000000333106a49567f1c105c0249b05ce2c8e6eb7e067f90c1f000800010002000000040005001400028008000200040000000800020005000000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x810)

11:50:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0)

[ 3127.375871][ T1537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:44 executing program 3:
pselect6(0x40, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8})

11:50:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x5c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:44 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x30}}, 0x20000014) (async)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000a41496b0a4b9bd836dc9a91d64a6d1deb980b27b622129d7cd0ea8230ad40f56568ba190eb777abbe2db806f91acd782b0f3d1ae74a379dbbaadd0feeb3799531be28aaeab236a8e878c7dc18d175ff51894cfabb9d5d473dbc686f460659054dc58ec6fef6d37f809b52d6538d4372f96565e8533c793287c7624e916e2b4ce0e680f1f7ae0053055ea9731a870b0a6cf2ad636418e164a154f54126922e027f2b6cb56a3d0551add9341e229515794b6557f6b6ffcd0e82df2f451bf344ced0941afc01bcaafa8cef8311f941bebe4d30796d3419055f60a65c6526c441ec47d39c58e751026f1bc000000", @ANYRES16=r5, @ANYBLOB="20002dbd7000fbdbdf25070000000800050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r9 = fcntl$dupfd(r8, 0x0, r8) (async)
r10 = getuid()
quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000202, r10, &(0x7f0000000480)='./file0\x00') (async)
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

[ 3127.623647][ T1544] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async, rerun: 64)
sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="070727bd7000fedbdf25100000005800068008000600060000003f00040067636d286165732900000000000000000000000000000000000000000000000017000000333106a49567f1c105c0249b05ce2c8e6eb7e067f90c1f000800010002000000040005001400028008000200040000000800020005000000"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x810) (rerun: 64)

11:50:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1c000000}, 0x0)

11:50:45 executing program 3:
socket(0x0, 0x8000d, 0x0)

11:50:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x60}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3128.079433][ T1555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3128.203701][ T1562] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:45 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x30}}, 0x20000014)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x20000000) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r4) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000a41496b0a4b9bd836dc9a91d64a6d1deb980b27b622129d7cd0ea8230ad40f56568ba190eb777abbe2db806f91acd782b0f3d1ae74a379dbbaadd0feeb3799531be28aaeab236a8e878c7dc18d175ff51894cfabb9d5d473dbc686f460659054dc58ec6fef6d37f809b52d6538d4372f96565e8533c793287c7624e916e2b4ce0e680f1f7ae0053055ea9731a870b0a6cf2ad636418e164a154f54126922e027f2b6cb56a3d0551add9341e229515794b6557f6b6ffcd0e82df2f451bf344ced0941afc01bcaafa8cef8311f941bebe4d30796d3419055f60a65c6526c441ec47d39c58e751026f1bc000000", @ANYRES16=r5, @ANYBLOB="20002dbd7000fbdbdf25070000000800050006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async, rerun: 64)
r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32)
r9 = fcntl$dupfd(r8, 0x0, r8) (async, rerun: 32)
r10 = getuid()
quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000202, r10, &(0x7f0000000480)='./file0\x00') (async)
ioctl$MON_IOCX_GETX(r9, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async, rerun: 32)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (rerun: 32)

11:50:45 executing program 3:
io_uring_setup(0x532f, &(0x7f0000000200)={0x0, 0x651c})

11:50:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x30000000}, 0x0)

11:50:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3128.724677][ T1569] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 3128.775207][ T1577] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:45 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @val, {@ipv6}}, 0x0)

11:50:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x4000800}, 0x840)

11:50:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:50:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0)

11:50:46 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private=0xa010102, {[@noop, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @lsrr={0x83, 0x17, 0x0, [@multicast1, @multicast2, @multicast1, @dev, @empty]}, @generic={0x0, 0xc, "b15a04dfebc14133613c"}, @noop, @ssrr={0x89, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @generic={0x0, 0x3, '~'}]}}}}})

[ 3129.423571][ T1592] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)

11:50:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x3}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc4230000}, 0x0)

11:50:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:47 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private=0xa010102, {[@noop, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @lsrr={0x83, 0x17, 0x0, [@multicast1, @multicast2, @multicast1, @dev, @empty]}, @generic={0x0, 0xc, "b15a04dfebc14133613c"}, @noop, @ssrr={0x89, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @generic={0x0, 0x3, '~'}]}}}}})

11:50:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x4}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async, rerun: 64)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async, rerun: 32)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x4000800}, 0x840) (rerun: 32)

11:50:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0)

11:50:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x210000, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)

11:50:47 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private=0xa010102, {[@noop, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @lsrr={0x83, 0x17, 0x0, [@multicast1, @multicast2, @multicast1, @dev, @empty]}, @generic={0x0, 0xc, "b15a04dfebc14133613c"}, @noop, @ssrr={0x89, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @generic={0x0, 0x3, '~'}]}}}}})

11:50:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x5}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xff600000}, 0x0)

11:50:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000065e6fa11001200ffff000008001400000000000600c485bca18fe21b0000000010"], 0x40}}, 0x0)

11:50:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r2, 0x0, r2) (async)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x4000800}, 0x840)

11:50:48 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private=0xa010102, {[@noop, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @lsrr={0x83, 0x17, 0x0, [@multicast1, @multicast2, @multicast1, @dev, @empty]}, @generic={0x0, 0xc, "b15a04dfebc14133613c"}, @noop, @ssrr={0x89, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop, @end, @generic={0x0, 0x3, '~'}]}}}}})

[ 3131.128613][ T1636] __nla_validate_parse: 2 callbacks suppressed
[ 3131.128689][ T1636] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x6}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000065e6fa11001200ffff000008001400000000000600c485bca18fe21b0000000010"], 0x40}}, 0x0)

11:50:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

11:50:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000400)={0x0, 0x7ffff000, &(0x7f00000003c0)={0x0}, 0x300}, 0x0)

11:50:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000065e6fa11001200ffff000008001400000000000600c485bca18fe21b0000000010"], 0x40}}, 0x0)

11:50:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r5, 0x0, r5)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r6, 0x0, r6)
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x4880)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$MON_IOCX_GETX(r10, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, r4, r5, r6, r7, r8, r10], 0x7)
r11 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r11, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r12 = fcntl$dupfd(r11, 0x0, r11)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0004ef", @ANYRES16=r14, @ANYBLOB="0100000000000000000007000000080001003b000000"], 0x1c}}, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff8}, 0x1c)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16=r14, @ANYRESDEC=r12], 0x470}, 0x1, 0x0, 0x0, 0x2000}, 0x20004085)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES64=r14], 0x398}}, 0x0)

[ 3131.812979][ T1655] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0)

11:50:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x7}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:49 executing program 3:
openat$zero(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r0 = getpid()
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_clone3(&(0x7f0000000440)={0x112000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x1}, 0x58)

11:50:49 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = dup2(r2, r0)
r6 = fcntl$dupfd(r4, 0x406, r5)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x4]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000014}, 0x1)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000040)={{0x3c, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x1, 'sh\x00', 0x1, 0x4, 0x5d}, {@empty, 0x4e23, 0x3, 0x1f3dc0, 0x5, 0x10000}}, 0x44)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcd60}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x3c}}, 0x0)

[ 3132.400355][ T1673] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

[ 3132.548659][ T1678] netlink: 828 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x8}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:49 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x40, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48)

11:50:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x2)

[ 3133.073603][ T1687] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (async)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r5, 0x0, r5) (async)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r6, 0x0, r6) (async)
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x4880)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$MON_IOCX_GETX(r10, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, r4, r5, r6, r7, r8, r10], 0x7) (async, rerun: 32)
r11 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r11, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r12 = fcntl$dupfd(r11, 0x0, r11) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async, rerun: 32)
sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0004ef", @ANYRES16=r14, @ANYBLOB="0100000000000000000007000000080001003b000000"], 0x1c}}, 0x0) (async, rerun: 32)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff8}, 0x1c) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16=r14, @ANYRESDEC=r12], 0x470}, 0x1, 0x0, 0x0, 0x2000}, 0x20004085) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES64=r14], 0x398}}, 0x0)

11:50:50 executing program 3:
r0 = socket(0x29, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'})

11:50:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x3)

[ 3133.629000][ T1699] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = dup2(r2, r0)
r6 = fcntl$dupfd(r4, 0x406, r5)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x4]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000014}, 0x1) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000040)={{0x3c, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x1, 'sh\x00', 0x1, 0x4, 0x5d}, {@empty, 0x4e23, 0x3, 0x1f3dc0, 0x5, 0x10000}}, 0x44)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcd60}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x3c}}, 0x0)

11:50:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:50 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8}, 0x48)

11:50:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (async)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) (async)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 64)
fcntl$dupfd(r5, 0x0, r5) (async, rerun: 64)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 64)
fcntl$dupfd(r6, 0x0, r6) (rerun: 64)
pipe2$9p(&(0x7f00000001c0)={<r7=>0xffffffffffffffff}, 0x4880)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$MON_IOCX_GETX(r10, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, r4, r5, r6, r7, r8, r10], 0x7) (async)
r11 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r11, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r12 = fcntl$dupfd(r11, 0x0, r11)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0004ef", @ANYRES16=r14, @ANYBLOB="0100000000000000000007000000080001003b000000"], 0x1c}}, 0x0) (async)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff8}, 0x1c)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES16=r14, @ANYRESDEC=r12], 0x470}, 0x1, 0x0, 0x0, 0x2000}, 0x20004085) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYRES64=r14], 0x398}}, 0x0)

11:50:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xf}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4)

[ 3134.206523][ T1714] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:51 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, &(0x7f0000000080)="a0", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)

11:50:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = dup2(r2, r0)
r6 = fcntl$dupfd(r4, 0x406, r5)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x2080, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r8, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x4]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000014}, 0x1) (async)
setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000040)={{0x3c, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x1, 'sh\x00', 0x1, 0x4, 0x5d}, {@empty, 0x4e23, 0x3, 0x1f3dc0, 0x5, 0x10000}}, 0x44)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xcd60}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x3c}}, 0x0)

11:50:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x45}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:51 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x1, 0x81, r4, 0x1}, 0xc)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4000045)

11:50:51 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x5)

11:50:51 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x2, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc0}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

[ 3134.855992][ T1731] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20060000", @ANYRES16=r1, @ANYBLOB="00042abd7000fddbdf250f00000008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x620}, 0x1, 0x0, 0x0, 0x1}, 0x844)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

[ 3134.977860][ T1736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x48}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x6)

11:50:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="02b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:52 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x1, 0x81, r4, 0x1}, 0xc)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4000045)

11:50:52 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x5c}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20060000", @ANYRES16=r1, @ANYBLOB="00042abd7000fddbdf250f00000008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x620}, 0x1, 0x0, 0x0, 0x1}, 0x844) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x40}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

[ 3135.694597][ T1751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x7)

11:50:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="03b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:53 executing program 3:
pipe(0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58)

11:50:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0}) (async, rerun: 64)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) (rerun: 64)
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f00000000c0)={0x0, 0x1, 0x81, r4, 0x1}, 0xc) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r6=>0x0}) (rerun: 32)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x4000045)

[ 3136.226633][ T1768] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x60}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3136.383047][ T1775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8)

11:50:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="05b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="20060000", @ANYRES16=r1, @ANYBLOB="00042abd7000fddbdf250f00000008000000", @ANYRES32=r2, @ANYBLOB="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"], 0x620}, 0x1, 0x0, 0x0, 0x1}, 0x844)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x40, r1, 0x1, 0x4, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x2}]}]}, 0x40}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)

11:50:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x212040)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x300}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3136.926888][ T1783] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x9)

11:50:54 executing program 3:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x88, 0x4, 0x0, 0x0)

11:50:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="08b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:54 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000410", @ANYRES16=0x0, @ANYBLOB="04002dbd7000ff0100000200000005000500050000001400010000000000000000000000ffffe00000010500050002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x2c0, r8, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x287, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_a, @initial, {0x5, 0x5}}, @ver_80211n={0x0, 0x20, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x8444, 0x0, @device_a, {0x0, 0xa, @random="5e9d20332ec580cdd9be"}, @void, @void, [{0xdd, 0x88, "825ce4dd24e090fdc43e8302ef692fa738bd4b4e0828267aee8f67391cd1bd20f4b344f549bf7716ee82be674b7daf9987a93464006d9a096e596b9f0a1b82e4b2e2bd66eb865db6ce7e93dceef2c51548c15b45d37aa8685a890759f5a0c3e277274b747742332575d421ca55732e472e566bb4d785da7b4e8b368ace074728cf3ebaf844f7acda"}, {0xdd, 0x33, "0bdf5fca453b05b82097dab4cf37400f7d5946d6ed1c34fe4da9eac0f6ec54dae448193cf9d05c009ca6b5be5caf3fa5a46453"}, {0xdd, 0x97, "9931fdad466c5bb0b35d4d5b34c9a3cf2d10d052be63d5c85bd208a5accba8650acd996680ad2d59bf622de774a512b7bbc03245895379db55cdc33e08f8e9d6200e4300250a8c81bfeffa02b6f3206fb7f3f19654156f9a8a752af7da08db0b3c9576ef04d2d578fdc46121de560bcb310aba8d5c126792845677714e7e0ec8c9560361942f604df5fa70570bf682c5ccc143e184ebae"}, {0xdd, 0x40, "02c62f114d318b6abe8a270bb190188d6f0eb008ced86be7e59dfbe26a6fedb3476a549ffec4988734750a503cf3dbfab4721d3962af5e491e2164bbccedffca"}, {0xdd, 0x6f, "dce56d3987b788db7d66421fe5221ad91e06f7fd2236ae8dfbb2a13a59ac5b4b7430f78c3cd1f289510c504223d25a4608ac760bdbbd21d1e384db6d2be4255b59984f0da9a1711c0d24454586e4deaa3460e8a71b0a6c988c302c8fac4264b9f8a7652ec9f80481aab2f74fcb9db4"}, {0xdd, 0x44, "2cc959ecfab718d968ceab11d652e07ae10a78b2ac6a083b643db17dbc18b71f8a1d7b7a848d9f15bfe80f049fbe5f2209f4434b7b9e4fd58ff02276aa9f14ffdca18862"}]}}, @NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x3, 0x9}}, @smps={0x7, 0x1, {0x1, 0x1}}}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x44000}, 0x20010844)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$MON_IOCX_GETX(r10, 0x80089203, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffff40})
sendfile(r10, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x5)

11:50:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x500}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:54 executing program 3:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x9, 0x1, &(0x7f0000000100)=@raw=[@ldst], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xf)

11:50:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="09b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:55 executing program 3:
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x420}, 0x420}}, 0x0)
recvmsg$can_j1939(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x434)

[ 3138.174017][ T1814] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x600}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x212040)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3)
read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x212040) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r2, 0x0, r2) (async)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) (async)
read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)

11:50:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x1c)

11:50:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="10b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:55 executing program 3:
pipe(&(0x7f0000000700)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:50:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x700}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0}) (async, rerun: 32)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32)
r5 = fcntl$dupfd(r4, 0x0, r4) (rerun: 32)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000410", @ANYRES16=0x0, @ANYBLOB="04002dbd7000ff0100000200000005000500050000001400010000000000000000000000ffffe00000010500050002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x2c0, r8, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x287, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_a, @initial, {0x5, 0x5}}, @ver_80211n={0x0, 0x20, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x8444, 0x0, @device_a, {0x0, 0xa, @random="5e9d20332ec580cdd9be"}, @void, @void, [{0xdd, 0x88, "825ce4dd24e090fdc43e8302ef692fa738bd4b4e0828267aee8f67391cd1bd20f4b344f549bf7716ee82be674b7daf9987a93464006d9a096e596b9f0a1b82e4b2e2bd66eb865db6ce7e93dceef2c51548c15b45d37aa8685a890759f5a0c3e277274b747742332575d421ca55732e472e566bb4d785da7b4e8b368ace074728cf3ebaf844f7acda"}, {0xdd, 0x33, "0bdf5fca453b05b82097dab4cf37400f7d5946d6ed1c34fe4da9eac0f6ec54dae448193cf9d05c009ca6b5be5caf3fa5a46453"}, {0xdd, 0x97, "9931fdad466c5bb0b35d4d5b34c9a3cf2d10d052be63d5c85bd208a5accba8650acd996680ad2d59bf622de774a512b7bbc03245895379db55cdc33e08f8e9d6200e4300250a8c81bfeffa02b6f3206fb7f3f19654156f9a8a752af7da08db0b3c9576ef04d2d578fdc46121de560bcb310aba8d5c126792845677714e7e0ec8c9560361942f604df5fa70570bf682c5ccc143e184ebae"}, {0xdd, 0x40, "02c62f114d318b6abe8a270bb190188d6f0eb008ced86be7e59dfbe26a6fedb3476a549ffec4988734750a503cf3dbfab4721d3962af5e491e2164bbccedffca"}, {0xdd, 0x6f, "dce56d3987b788db7d66421fe5221ad91e06f7fd2236ae8dfbb2a13a59ac5b4b7430f78c3cd1f289510c504223d25a4608ac760bdbbd21d1e384db6d2be4255b59984f0da9a1711c0d24454586e4deaa3460e8a71b0a6c988c302c8fac4264b9f8a7652ec9f80481aab2f74fcb9db4"}, {0xdd, 0x44, "2cc959ecfab718d968ceab11d652e07ae10a78b2ac6a083b643db17dbc18b71f8a1d7b7a848d9f15bfe80f049fbe5f2209f4434b7b9e4fd58ff02276aa9f14ffdca18862"}]}}, @NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x3, 0x9}}, @smps={0x7, 0x1, {0x1, 0x1}}}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x44000}, 0x20010844) (async)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r10 = fcntl$dupfd(r9, 0x0, r9)
ioctl$MON_IOCX_GETX(r10, 0x80089203, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffff40})
sendfile(r10, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x5)

11:50:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x30)

11:50:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="25b32a922b0b2608002805"], 0x398}}, 0x0)

11:50:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
syz_open_dev$vcsu(&(0x7f0000000040), 0x8000, 0x212040) (async)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) (async)
read$FUSE(r3, &(0x7f0000000680)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:56 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f00000001c0), 0x4)

11:50:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x900}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3139.252000][ T1839] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x60)

11:50:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b082608002805"], 0x398}}, 0x0)

11:50:56 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0}) (async, rerun: 32)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000410", @ANYRES16=0x0, @ANYBLOB="04002dbd7000ff0100000200000005000500050000001400010000000000000000000000ffffe00000010500050002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$MON_IOCX_GETX(r7, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)={0x2c0, r8, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x287, 0x33, @reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_a, @initial, {0x5, 0x5}}, @ver_80211n={0x0, 0x20, 0x0, 0x2, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x8444, 0x0, @device_a, {0x0, 0xa, @random="5e9d20332ec580cdd9be"}, @void, @void, [{0xdd, 0x88, "825ce4dd24e090fdc43e8302ef692fa738bd4b4e0828267aee8f67391cd1bd20f4b344f549bf7716ee82be674b7daf9987a93464006d9a096e596b9f0a1b82e4b2e2bd66eb865db6ce7e93dceef2c51548c15b45d37aa8685a890759f5a0c3e277274b747742332575d421ca55732e472e566bb4d785da7b4e8b368ace074728cf3ebaf844f7acda"}, {0xdd, 0x33, "0bdf5fca453b05b82097dab4cf37400f7d5946d6ed1c34fe4da9eac0f6ec54dae448193cf9d05c009ca6b5be5caf3fa5a46453"}, {0xdd, 0x97, "9931fdad466c5bb0b35d4d5b34c9a3cf2d10d052be63d5c85bd208a5accba8650acd996680ad2d59bf622de774a512b7bbc03245895379db55cdc33e08f8e9d6200e4300250a8c81bfeffa02b6f3206fb7f3f19654156f9a8a752af7da08db0b3c9576ef04d2d578fdc46121de560bcb310aba8d5c126792845677714e7e0ec8c9560361942f604df5fa70570bf682c5ccc143e184ebae"}, {0xdd, 0x40, "02c62f114d318b6abe8a270bb190188d6f0eb008ced86be7e59dfbe26a6fedb3476a549ffec4988734750a503cf3dbfab4721d3962af5e491e2164bbccedffca"}, {0xdd, 0x6f, "dce56d3987b788db7d66421fe5221ad91e06f7fd2236ae8dfbb2a13a59ac5b4b7430f78c3cd1f289510c504223d25a4608ac760bdbbd21d1e384db6d2be4255b59984f0da9a1711c0d24454586e4deaa3460e8a71b0a6c988c302c8fac4264b9f8a7652ec9f80481aab2f74fcb9db4"}, {0xdd, 0x44, "2cc959ecfab718d968ceab11d652e07ae10a78b2ac6a083b643db17dbc18b71f8a1d7b7a848d9f15bfe80f049fbe5f2209f4434b7b9e4fd58ff02276aa9f14ffdca18862"}]}}, @NL80211_ATTR_FRAME={0x1f, 0x33, @action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @from_mac=@device_b, {0x3, 0x9}}, @smps={0x7, 0x1, {0x1, 0x1}}}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x44000}, 0x20010844) (async, rerun: 32)
r9 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r9, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32)
r10 = fcntl$dupfd(r9, 0x0, r9) (rerun: 32)
ioctl$MON_IOCX_GETX(r10, 0x80089203, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffff40}) (async)
sendfile(r10, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x5)

11:50:56 executing program 3:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x80343, 0x0)

11:50:56 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x28, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xf00}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x300)

[ 3139.905228][ T1857] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:57 executing program 3:
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x8000}, 0x0, &(0x7f0000000140)={&(0x7f0000000100), 0x8})

[ 3140.134356][ T1867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b102608002805"], 0x398}}, 0x0)

11:50:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x28, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x26a9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r9, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cf42d7cb62d8f3cb7e13ee0d761d2af21eb4bf21cbf140004007767312001b56d43d9c9c7"], 0x5c}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x22b, 0x56}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "8c33ee5e"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "ee69bdbe8e564a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "858e53a069"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x8044005)
r10 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r10, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$MON_IOCX_GETX(r11, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r12, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r13 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r14 = fcntl$dupfd(r13, 0x0, r12)
ioctl$MON_IOCX_GETX(r14, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb, 0xa8, @random="8599598d072f6d"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x5d}]}, 0x28}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c80)={0x264, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000044}, 0x80000)
ioctl$MON_IOCT_RING_SIZE(r14, 0x9204, 0xfae4e)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000100", @ANYRES16=r1, @ANYBLOB="00022cbd7000000000000000038cdaaa10508b79dcb006bf710154", @ANYRES32=r15, @ANYBLOB="0e00cd0000000100050000000004000008009f00050000000800a100018000000800a100010001000800270002000000050019010e000000050019010a000000080026006c090000080027000200000008009f0002000000080027000300000004008e0008005700e10e0000050019010c0000000800a100000400000800a10008000000050018011f00000008002600940900000800270002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24008000}, 0xc411f099ff8f0f7e)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000b19bcaa4b86bb37967cafbdf2edb41e84a776fc2cd4b4b5b10b1876650a99d433fc7859af69fcec9c913088ab6df059b", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r16, @ANYBLOB="2400238008000b000000000006001200ffff000006000300a000000006001b0000000000"], 0x40}}, 0x0)

11:50:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x500)

11:50:57 executing program 3:
mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000)

[ 3140.590128][ T1875] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b552608002805"], 0x398}}, 0x0)

11:50:58 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x28, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)

11:50:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x4500}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:58 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, &(0x7f0000000140)="e1f6d7bbe90ec232978ab6675496216dd960379ac9470054b2bd9dcbd33658347889f7536683669ac69aae880d11d255d556fde854f68111a414c0", 0x3b, 0x0, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @empty}, 0x1c)

[ 3141.189475][ T1894] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x600)

11:50:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b260b002805"], 0x398}}, 0x0)

[ 3141.435485][ T1899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
11:50:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x4800}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:58 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'caif0\x00', 'pimreg1\x00', {}, {0xff}}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)

11:50:58 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104001000"/20, @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800b00010062726964676500000c000280200000000000000008000a00", @ANYRES32], 0x44}}, 0x0)

11:50:58 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r9, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cf42d7cb62d8f3cb7e13ee0d761d2af21eb4bf21cbf140004007767312001b56d43d9c9c7"], 0x5c}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x22b, 0x56}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "8c33ee5e"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "ee69bdbe8e564a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "858e53a069"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x8044005)
r10 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r10, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$MON_IOCX_GETX(r11, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r12, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r13 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r14 = fcntl$dupfd(r13, 0x0, r12)
ioctl$MON_IOCX_GETX(r14, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb, 0xa8, @random="8599598d072f6d"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x5d}]}, 0x28}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c80)={0x264, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000044}, 0x80000) (async)
ioctl$MON_IOCT_RING_SIZE(r14, 0x9204, 0xfae4e)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000100", @ANYRES16=r1, @ANYBLOB="00022cbd7000000000000000038cdaaa10508b79dcb006bf710154", @ANYRES32=r15, @ANYBLOB="0e00cd0000000100050000000004000008009f00050000000800a100018000000800a100010001000800270002000000050019010e000000050019010a000000080026006c090000080027000200000008009f0002000000080027000300000004008e0008005700e10e0000050019010c0000000800a100000400000800a10008000000050018011f00000008002600940900000800270002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24008000}, 0xc411f099ff8f0f7e) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000b19bcaa4b86bb37967cafbdf2edb41e84a776fc2cd4b4b5b10b1876650a99d433fc7859af69fcec9c913088ab6df059b", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r16, @ANYBLOB="2400238008000b000000000006001200ffff000006000300a000000006001b0000000000"], 0x40}}, 0x0)

11:50:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x700)

[ 3141.876563][ T1908] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3141.987758][ T1912] x_tables: duplicate underflow at hook 3
11:50:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2610002805"], 0x398}}, 0x0)

[ 3142.084249][ T1914] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3142.110422][ T1914] bridge1: entered promiscuous mode
[ 3142.116177][ T1914] bridge1: entered allmulticast mode
11:50:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x5c00}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:50:59 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'macvtap0\x00', 0x2})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'wg1\x00', @dev})

11:50:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000080001003b00000008000300", @ANYRES32=r9, @ANYBLOB="080005000a0000001c00e700197ea7782f04b01a60750196517cf42d7cb62d8f3cb7e13ee0d761d2af21eb4bf21cbf140004007767312001b56d43d9c9c7"], 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x22b, 0x56}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "8c33ee5e"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "ee69bdbe8e564a"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "858e53a069"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x8044005)
r10 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r10, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$MON_IOCX_GETX(r11, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r12 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r12, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r13 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r14 = fcntl$dupfd(r13, 0x0, r12)
ioctl$MON_IOCX_GETX(r14, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb, 0xa8, @random="8599598d072f6d"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x5d}]}, 0x28}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000c80)={0x264, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x264}, 0x1, 0x0, 0x0, 0x20000044}, 0x80000)
ioctl$MON_IOCT_RING_SIZE(r14, 0x9204, 0xfae4e) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000100", @ANYRES16=r1, @ANYBLOB="00022cbd7000000000000000038cdaaa10508b79dcb006bf710154", @ANYRES32=r15, @ANYBLOB="0e00cd0000000100050000000004000008009f00050000000800a100018000000800a100010001000800270002000000050019010e000000050019010a000000080026006c090000080027000200000008009f0002000000080027000300000004008e0008005700e10e0000050019010c0000000800a100000400000800a10008000000050018011f00000008002600940900000800270002000000"], 0xb8}, 0x1, 0x0, 0x0, 0x24008000}, 0xc411f099ff8f0f7e) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r16=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000b19bcaa4b86bb37967cafbdf2edb41e84a776fc2cd4b4b5b10b1876650a99d433fc7859af69fcec9c913088ab6df059b", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf254400000008000300", @ANYRES32=r16, @ANYBLOB="2400238008000b000000000006001200ffff000006000300a000000006001b0000000000"], 0x40}}, 0x0)

[ 3142.577461][ T1927] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:50:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x900)

11:50:59 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104001000"/20, @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800b00010062726964676500000c000280200000000000000008000a00", @ANYRES32], 0x44}}, 0x0)

11:50:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2629002805"], 0x398}}, 0x0)

11:50:59 executing program 3:
r0 = fsopen(&(0x7f00000001c0)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

11:50:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0x6000}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3143.161676][ T1944] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3143.227823][ T1942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
11:51:00 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [], [], 'caif0\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)

[ 3143.390841][ T1942] bridge1: entered promiscuous mode
[ 3143.396533][ T1942] bridge1: entered allmulticast mode
11:51:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xf00)

11:51:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26e00d2805"], 0x398}}, 0x0)

[ 3143.630642][ T1950] x_tables: duplicate underflow at hook 3
11:51:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140), 0x8)

[ 3143.857020][ T1954] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{0x44, 0x0, 0xa926}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x1c00)

11:51:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26e80d2805"], 0x398}}, 0x0)

11:51:01 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104001000"/20, @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800b00010062726964676500000c000280200000000000000008000a00", @ANYRES32], 0x44}}, 0x0)

11:51:01 executing program 3:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x109200, 0x0)

[ 3144.592565][ T1963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3144.683696][ T1963] bridge1: entered promiscuous mode
[ 3144.691860][ T1963] bridge1: entered allmulticast mode
11:51:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x23c4)

11:51:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x4, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26f00d2805"], 0x398}}, 0x0)

11:51:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r0, 0x0, 0x1b, 0x0, &(0x7f0000000100))

[ 3145.310311][ T1972] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3145.336475][ T1975] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
11:51:02 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x3000)

11:51:02 executing program 3:
pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8})

11:51:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26f80d2805"], 0x398}}, 0x0)

11:51:02 executing program 5:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104001000"/20, @ANYRES32=0x0, @ANYBLOB="7bbf0100000000001c0012800b00010062726964676500000c000280200000000000000008000a00", @ANYRES32], 0x44}}, 0x0)

11:51:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x5, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:03 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
recvfrom$inet6(r0, 0x0, 0x0, 0x40000060, 0x0, 0x0)

[ 3146.009942][ T1983] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
11:51:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x6000)

[ 3146.174286][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 3146.197735][ T1987] bridge1: entered promiscuous mode
[ 3146.203575][ T1987] bridge1: entered allmulticast mode
11:51:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26000e2805"], 0x398}}, 0x0)

11:51:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x6, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:03 executing program 3:
getresgid(&(0x7f00000003c0), &(0x7f0000002440), &(0x7f0000002480))

[ 3146.642762][ T2000] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 3146.811593][ T1999] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x1)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x30}}, 0x20000014)
sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5110018}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb14}]}, 0x60}}, 0xc810)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r10=>0x0}, &(0x7f00000004c0)=0xc)
r11 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x0, &(0x7f0000000500))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000580)={0x0, <r12=>0x0})
read$FUSE(r7, &(0x7f0000001540)={0x2020, 0x0, 0x0, <r13=>0x0}, 0x2020)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000600)=<r14=>0x0)
r15 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001040), 0xe88a9f56b536100d, 0x20)
fstat(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r17, 0x0, &(0x7f0000000500))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc, &(0x7f0000001380)=[{&(0x7f0000000440)={0x2c, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x56, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, {&(0x7f0000000680)={0x1a4, 0x1e, 0x200, 0x70bd29, 0x25dfdbfc, "", [@nested={0xea, 0x38, 0x0, 0x1, [@generic="f51ee83a20704b8d85cb3203eaf031007bda3d455d291a7284ff000dd65d32a934cee5c0d8546a7d67909e2e5bb41e8ae1a2c7545c40498d233fe7f3b97b0f460dcd017b716f96220e95348e0dc4fb972ae86343ff4203badf7196e9919f53e96a73bbd0c6ef4d31afa8e049ff86a5dc42f65ede95852bb9f945c15a13cfa702d1422c14e1e60d579086db3bdf6012268a9aaac742ade08359c592a903758a602211d32b258ef74832959e86c8d4d66dfce7ef3b1ba2f2ced0ce252b675917932e71cf1c928cc7c106b6ba0d77d0cecd9f13799560a040d7dd6ff59be47bca3cb3cbe1168ed5"]}, @typed={0x8, 0x4b, 0x0, 0x0, @pid=r10}, @nested={0x7c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @pid}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0xffffffff}, @generic="b2c61d7c2cb7a7b4681f2d951d2abf3f3604030fffccbaa084bd132b0760a875b46aa3e13244a19b36491b135065f48148b66be57a07ff9c5bb3cc5ab8701904497e06689cfa8556a49411aec9a0077e8daaaf46c52dc59e4d9644e96519775ee42cb3edfb343e75"]}, @typed={0x7, 0x53, 0x0, 0x0, @str='(/\x00'}, @generic, @generic="4661159ba65a6672e2f5155abec49ec9f9f99e74c69e929bfd"]}, 0x1a4}, {&(0x7f0000000840)={0x550, 0x33, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xff, 0x33, 0x0, 0x1, [@typed={0xc, 0x82, 0x0, 0x0, @u64=0xfffffffffffffa8c}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x3ff}, @generic="d12f88610a723f1eb5bf02f18e22a495df8acac0999a9f9757e4b14aac", @generic="0e2d9a56c18597b301ed0c7e88742372b2f1b057bdac80b1b36f05fb8a2b348ab2516f6c535198ff1b7fc20b81d6a1df8269df717ab6e6c0b84d5dc575255059b97eef627b283a3781bb5dab0e12793f67ce6233ac3491e88d8121de972467294d0d31d9f473c1bafcb0b0e4d983c99d1db617156628d59b28ae31abd6171ae5911444fd4f491b29d5172705e8d80a0e532bf49b009a079528d78f249f7f98d75d572051d62a22318053", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x12, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="384cf68a1ed06109"]}, @nested={0x14e, 0x2e, 0x0, 0x1, [@generic="187141c58defc6cdd7dfa65930d71252984a20a23165ff138b7b6f458bd64e6a786d72867f65fc64df05e0eb2328c6f9c9755a17a8b27564e6e6ce195e1005c692ed52c8e02a54882c9d7d8fbb9139f6cdbeedef742a2a02d77dfd262d347fe8da0f4056e618fe17cd2131b57ff854f1de36237cd8a42fa4fea7046637bb335ea22d05dff1c32cc7d2c2c19b7cd5a5065b97e6f900ecd42f929fffcd814ba3dc9bc509e47730d08bff955ec203b8e515af2cbc", @generic="a1aa15d2b89f4b4660345bc625256989e5b14ebb3c4c04c325576ff596d33bdeafd7a6a511fa31940a90c1dd9ffe92ebe2bc0022b551d83f28e62e9c50599b7ee86ab34663f611955417c9007d239d631f370fc2c1f6902a122f44b239b0e4a2693257feadc5f426a117b242e184dab9970f023d791cc24689d7f72c8e9fdca8f87ed35726fd0d0b9a943a26541080dccedccccb0bf9da"]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@local}, @typed={0xb, 0x415, 0x0, 0x0, @str='-\x8b{$$\'\x00'}, @nested={0x123, 0x2a, 0x0, 0x1, [@typed={0x1c, 0x70, 0x0, 0x0, @binary="422e15ed15d5c1851da367d0a2cb569871107984680c5c2a"}, @generic="8909eef8daeb3def67d10cd7cbce90d60978770665d3dc2eedb57da5bc4ad0b232bf809530c0c67e21071fda6f57047bcd8ebebb77230630333ef3897616acd173d1441f049af369fdfe56a23932a58c3b95a8e26391182b7cef58241da3363b7d8f2f139820b35c9283b6330f77933ebed9c1868e0a1ab616e45399586c6b065cc8f465032a621310", @generic="a71464662a870ca41d872cdbfb9d97252593bade106f9b0a47b8cb5472cbb690406f4fc51f045e0d2e5f144e493ad672e1e1112c4b85fbe7c96d0f3743443f11d8520165a11225539b1a011075cb3a025d5d6661fdc863c85ed2187d00d4207009bb5fae7a7c96d1eaa6270ba3", @generic="1791faa4a2d395983ead0350e6"]}, @nested={0x1b6, 0x12, 0x0, 0x1, [@typed={0xc, 0x86, 0x0, 0x0, @u64=0x3}, @typed={0x85, 0x68, 0x0, 0x0, @binary="1b110665ccd9b9ed18db5b2b330d6c8d8b3cc3c7e3cbf948d701a6e638d0092f0722bc8009192aba13b8d0d450a20d4e472daaf14c8643147e8da688e78a38cb7c185c460acb8819896eed276be463eabbb82315aa78f384522b434f27067e7d453e42524842acdd040926fcce1a70eb02b5b2dc43a5fb1bbac389b3f2eed33091"}, @generic="056774e2d9821d1eb2230255002c008b1b5b4d9a79202e89ff18aa10f6e72f70d3dfed804b", @generic="392261a7b4964b9c204a833a2c422dc8d45da3ff2c72f3cb87a0f9010384652e7b1dd4e55716c1742fee1e3051043144122d590b78da1d71c45754725a1524be232de08e7d960fb952a07aad86dfc984b03ff1f58eee0978444c68bccd55b1c723960827dc2751f75d54e97e2781cc7f7d0610a5cf230dc385c7e2c9307042bf0109f260abe7da250285e248a7ddc81913b31a0ad8de0203e8d1c85e59bba70acdfc3cdeda6711eb6388e17369f4f9a21f62debe5348e96b7dfa68d715c2f84b9e82df32ac5046994f1636afb33864c2524f93cedd5833fe20395dfac530811de7c9b24ece5c7e505815de0820975bdea5402e1c0b16115424"]}]}, 0x550}, {&(0x7f0000000dc0)={0x25c, 0x1d, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="3cb1c8d31b166e549e3daa5bc71049c72389c33caa7ce833", @generic="e611d02f5c9d8a2d2cdb9a6943bc1f5c829daa55d8fb284912be47e19ff36249bbb0fee10e84a72c4c0e1209738fc329e94d07c76a47d247990d3c2f3380a7c40475e6e422ca556218bcb414f5b58f7813f75feaa9871b7d6479db32907985cfafb3f5e07c7c8e46f751d42245a9f9bd607f513ff7deaf2826df02a2abb421ff033ee40ca77761872e5c26a6a11f4231437ea14f10e5cc27", @generic="5f3cc57b01ac07e70aff5546b30980f9841a649c487daedfe6e24f684d9aff25f8599ae597d9c602057305fa46995d6443c7830a95a74fb717dfa8556667", @nested={0x129, 0x19, 0x0, 0x1, [@generic="02e6f347530986d128ab4f9c86cf912f0710e2596e8ee069edc44311cfaae9cb", @generic="e73fff7d15342b6cf334ac4a4f8a268945d6eb9150722cf23c701ef5d610f4616c7366fc77eb8f82933eea2b243c4c7b8af00d3e7b665a4bcae24f", @typed={0x8, 0x80, 0x0, 0x0, @u32}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=r12}, @generic="5909ed837d6cdf31f4c2d577eeebf33495077f795217e8bf82c99bf1c75700733f8db55c8a0d8f8ff8815f3ca38b86481a8ea174028c730e8a3dfd091a19d0da1ef9ef288a91b91afab2ac2cc92c00882f9df93959b5da24ccf0a34c8fc3f956ad65734574de015e75684b392e674608723dd24bbea034ce693753ad196cfc1e51a5dc37e8d149e607c61a20c4184978036dba6dca52f7edc1463cd45a87e9512d617343a7b0"]}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @nested={0x14, 0x75, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x92, 0x0, 0x0, @u32}]}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x25c}, {&(0x7f0000001080)={0x24c, 0x3d, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0x23a, 0x2e, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=r13}, @generic="4e69f509804a550a337e157b3af3dfda3f3150b8aff7346b62d9f2cab31d9fa03fb1869050505477f73b5159f6bf95b0dfeb527f3aa2012d8eb2d5a2236a04043df6b6aaf057ede5413d65558c49fb3033e46f5016386b237eae92641eaa0cab80227cfe55e635055cdaa5395ca8188a6c8f7ea98dbe5ef64cc086b62ca12d2c2b42450bab2f1f566daf4221c2be5828061eca96888c4a5c9dfe9b7d535860e632452f3efeb9c70cb87e73d810b986e0fec093a2b0f7bfa38d6bb4c93eaeb510015994da01e3997a460384d64a52bfc3e4fb1c66096fd3e4b0182aa79e5a55c2ebea61648c2b57", @generic="28fd3926e1624554b3b0383b6280538d6885544c2a207c7201c0382441516e0eb51f2c7356713fb87d9c628a37d8889f5d476ffcc956c82a25844db676adbd7ac2b24d7db8906896b2f9cfdd05b10204cbe052781ed2546a729b9ac844762f1b26e42d60670d1e56c791c9ea46166fd3f67f503ef527f95fe5f87fb331a57d3388b7310e4e593b431cd3abbb597a7a3bdc03ae", @generic="b9d3d5861cca90aab4ecf4552063f4db46973f645c500b573f3ff9282989d979ec1e674399f646b727eff5893f9a953441ba2f816b5f2d0ab4698b02752552a019b1f9867d3f64e752c7fb8a7ca3b54a3772", @typed={0x8, 0x71, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r15}, @generic="1074f326cda38f3b23095cdb117cd5bc9916a481a6f664696b006fdfb8126c9bd606470c68521c5230c32435ef6206b702726c555aaa072a5e12a21dfd2ab9f73c907ef30e200817992b3aeebc98", @typed={0x4, 0x55}]}]}, 0x24c}, {&(0x7f0000003580)={0x284, 0x31, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x259, 0x19, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="fc4130bb4a354d94a495867224b90c5e5c6e7d7c0519c565b95413344b461557bdb98467a06589e559a2e8aa8eb0be2f975b8744db35b0a8d97e272caad0e08d7d7d8bc8b300c76404d497bddb00ff436418dd3b492b8abbc1f6ae49030aeeafa76b245d3763303ec77f404a4a9aa80a6e25dc45d0188091816dcde9d9195d35a657d6a03291eb842bcdafbb2bc453dbd478760aa9ebf72592fabaad8685101f50c792e3594ea2e983a740503f74e871b1daf1329f11d28077a65c64c44cb660be59dd8b30c12bda04fc65005181876ef3b1", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@remote}, @generic="4b6660db0f41224aba8d621824bcbaa34a28b1355582abe64be116c93db0a7eed86d94273a836ebc7827328789998d0a1a0260a5208b24e6c5674cb26c4355ed31adab97f8ee71862282a5815973906440c11bdfc4c25c50ad9ee06992051e7851d586e99c9d", @generic="21861677cce1dadbd40a3f075e2dfd209655ed1eaaa7b2d382015379b14b3649df384ba9df28d6848a42179ac9caf5659cebb45a04f4a21ba9b76b488c0cea719e2350d0153feb80fae7539d592a4f87b4505dd52f837845f767107080839dde68f0fd3e45f337e95b19a24919156afbfa894f6a9dffea6625c5de760fb3c966c0a05d33357af2f430b168", @typed={0x8, 0x21, 0x0, 0x0, @uid=r16}, @generic="75456536d0d8b7bcbb86176b805d5caa6042ddb4f734c91cc0565e9a451285cfd362e317975d9539e304731068ccc0dda99be9e16929107bf5296fbc9715df9ca5fc85d845a150422a07f62a4557d210af422de1b4647312d2aa58951f9422711e76e615479649f4e3732bb5edc4f3545813", @typed={0x8, 0x0, 0x0, 0x0, @pid=r17}]}, @typed={0x15, 0x8a, 0x0, 0x0, @binary="aee53adca4fe7070cfe58baf53906c2f06"}]}, 0x284}], 0x6, 0x0, 0x0, 0x4040001}, 0x24040000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24014004}, 0x4000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:51:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x60ff)

11:51:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x9, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:04 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

11:51:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080e2805"], 0x398}}, 0x0)

[ 3147.415816][ T2009] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
11:51:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x1)
syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x30}}, 0x20000014)
sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5110018}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb14}]}, 0x60}}, 0xc810) (async)
sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5110018}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb14}]}, 0x60}}, 0xc810)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r10=>0x0}, &(0x7f00000004c0)=0xc)
getpgrp(0x0) (async)
r11 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x0, &(0x7f0000000500)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x0, &(0x7f0000000500))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000580)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000580)={0x0, <r12=>0x0})
read$FUSE(r7, &(0x7f0000001540)={0x2020, 0x0, 0x0, <r13=>0x0}, 0x2020)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000600)=<r14=>0x0)
openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001040), 0xe88a9f56b536100d, 0x20) (async)
r15 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001040), 0xe88a9f56b536100d, 0x20)
fstat(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r17, 0x0, &(0x7f0000000500)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x0, r17, 0x0, &(0x7f0000000500))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc, &(0x7f0000001380)=[{&(0x7f0000000440)={0x2c, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x56, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, {&(0x7f0000000680)={0x1a4, 0x1e, 0x200, 0x70bd29, 0x25dfdbfc, "", [@nested={0xea, 0x38, 0x0, 0x1, [@generic="f51ee83a20704b8d85cb3203eaf031007bda3d455d291a7284ff000dd65d32a934cee5c0d8546a7d67909e2e5bb41e8ae1a2c7545c40498d233fe7f3b97b0f460dcd017b716f96220e95348e0dc4fb972ae86343ff4203badf7196e9919f53e96a73bbd0c6ef4d31afa8e049ff86a5dc42f65ede95852bb9f945c15a13cfa702d1422c14e1e60d579086db3bdf6012268a9aaac742ade08359c592a903758a602211d32b258ef74832959e86c8d4d66dfce7ef3b1ba2f2ced0ce252b675917932e71cf1c928cc7c106b6ba0d77d0cecd9f13799560a040d7dd6ff59be47bca3cb3cbe1168ed5"]}, @typed={0x8, 0x4b, 0x0, 0x0, @pid=r10}, @nested={0x7c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @pid}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0xffffffff}, @generic="b2c61d7c2cb7a7b4681f2d951d2abf3f3604030fffccbaa084bd132b0760a875b46aa3e13244a19b36491b135065f48148b66be57a07ff9c5bb3cc5ab8701904497e06689cfa8556a49411aec9a0077e8daaaf46c52dc59e4d9644e96519775ee42cb3edfb343e75"]}, @typed={0x7, 0x53, 0x0, 0x0, @str='(/\x00'}, @generic, @generic="4661159ba65a6672e2f5155abec49ec9f9f99e74c69e929bfd"]}, 0x1a4}, {&(0x7f0000000840)={0x550, 0x33, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xff, 0x33, 0x0, 0x1, [@typed={0xc, 0x82, 0x0, 0x0, @u64=0xfffffffffffffa8c}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x3ff}, @generic="d12f88610a723f1eb5bf02f18e22a495df8acac0999a9f9757e4b14aac", @generic="0e2d9a56c18597b301ed0c7e88742372b2f1b057bdac80b1b36f05fb8a2b348ab2516f6c535198ff1b7fc20b81d6a1df8269df717ab6e6c0b84d5dc575255059b97eef627b283a3781bb5dab0e12793f67ce6233ac3491e88d8121de972467294d0d31d9f473c1bafcb0b0e4d983c99d1db617156628d59b28ae31abd6171ae5911444fd4f491b29d5172705e8d80a0e532bf49b009a079528d78f249f7f98d75d572051d62a22318053", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x12, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="384cf68a1ed06109"]}, @nested={0x14e, 0x2e, 0x0, 0x1, [@generic="187141c58defc6cdd7dfa65930d71252984a20a23165ff138b7b6f458bd64e6a786d72867f65fc64df05e0eb2328c6f9c9755a17a8b27564e6e6ce195e1005c692ed52c8e02a54882c9d7d8fbb9139f6cdbeedef742a2a02d77dfd262d347fe8da0f4056e618fe17cd2131b57ff854f1de36237cd8a42fa4fea7046637bb335ea22d05dff1c32cc7d2c2c19b7cd5a5065b97e6f900ecd42f929fffcd814ba3dc9bc509e47730d08bff955ec203b8e515af2cbc", @generic="a1aa15d2b89f4b4660345bc625256989e5b14ebb3c4c04c325576ff596d33bdeafd7a6a511fa31940a90c1dd9ffe92ebe2bc0022b551d83f28e62e9c50599b7ee86ab34663f611955417c9007d239d631f370fc2c1f6902a122f44b239b0e4a2693257feadc5f426a117b242e184dab9970f023d791cc24689d7f72c8e9fdca8f87ed35726fd0d0b9a943a26541080dccedccccb0bf9da"]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@local}, @typed={0xb, 0x415, 0x0, 0x0, @str='-\x8b{$$\'\x00'}, @nested={0x123, 0x2a, 0x0, 0x1, [@typed={0x1c, 0x70, 0x0, 0x0, @binary="422e15ed15d5c1851da367d0a2cb569871107984680c5c2a"}, @generic="8909eef8daeb3def67d10cd7cbce90d60978770665d3dc2eedb57da5bc4ad0b232bf809530c0c67e21071fda6f57047bcd8ebebb77230630333ef3897616acd173d1441f049af369fdfe56a23932a58c3b95a8e26391182b7cef58241da3363b7d8f2f139820b35c9283b6330f77933ebed9c1868e0a1ab616e45399586c6b065cc8f465032a621310", @generic="a71464662a870ca41d872cdbfb9d97252593bade106f9b0a47b8cb5472cbb690406f4fc51f045e0d2e5f144e493ad672e1e1112c4b85fbe7c96d0f3743443f11d8520165a11225539b1a011075cb3a025d5d6661fdc863c85ed2187d00d4207009bb5fae7a7c96d1eaa6270ba3", @generic="1791faa4a2d395983ead0350e6"]}, @nested={0x1b6, 0x12, 0x0, 0x1, [@typed={0xc, 0x86, 0x0, 0x0, @u64=0x3}, @typed={0x85, 0x68, 0x0, 0x0, @binary="1b110665ccd9b9ed18db5b2b330d6c8d8b3cc3c7e3cbf948d701a6e638d0092f0722bc8009192aba13b8d0d450a20d4e472daaf14c8643147e8da688e78a38cb7c185c460acb8819896eed276be463eabbb82315aa78f384522b434f27067e7d453e42524842acdd040926fcce1a70eb02b5b2dc43a5fb1bbac389b3f2eed33091"}, @generic="056774e2d9821d1eb2230255002c008b1b5b4d9a79202e89ff18aa10f6e72f70d3dfed804b", @generic="392261a7b4964b9c204a833a2c422dc8d45da3ff2c72f3cb87a0f9010384652e7b1dd4e55716c1742fee1e3051043144122d590b78da1d71c45754725a1524be232de08e7d960fb952a07aad86dfc984b03ff1f58eee0978444c68bccd55b1c723960827dc2751f75d54e97e2781cc7f7d0610a5cf230dc385c7e2c9307042bf0109f260abe7da250285e248a7ddc81913b31a0ad8de0203e8d1c85e59bba70acdfc3cdeda6711eb6388e17369f4f9a21f62debe5348e96b7dfa68d715c2f84b9e82df32ac5046994f1636afb33864c2524f93cedd5833fe20395dfac530811de7c9b24ece5c7e505815de0820975bdea5402e1c0b16115424"]}]}, 0x550}, {&(0x7f0000000dc0)={0x25c, 0x1d, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="3cb1c8d31b166e549e3daa5bc71049c72389c33caa7ce833", @generic="e611d02f5c9d8a2d2cdb9a6943bc1f5c829daa55d8fb284912be47e19ff36249bbb0fee10e84a72c4c0e1209738fc329e94d07c76a47d247990d3c2f3380a7c40475e6e422ca556218bcb414f5b58f7813f75feaa9871b7d6479db32907985cfafb3f5e07c7c8e46f751d42245a9f9bd607f513ff7deaf2826df02a2abb421ff033ee40ca77761872e5c26a6a11f4231437ea14f10e5cc27", @generic="5f3cc57b01ac07e70aff5546b30980f9841a649c487daedfe6e24f684d9aff25f8599ae597d9c602057305fa46995d6443c7830a95a74fb717dfa8556667", @nested={0x129, 0x19, 0x0, 0x1, [@generic="02e6f347530986d128ab4f9c86cf912f0710e2596e8ee069edc44311cfaae9cb", @generic="e73fff7d15342b6cf334ac4a4f8a268945d6eb9150722cf23c701ef5d610f4616c7366fc77eb8f82933eea2b243c4c7b8af00d3e7b665a4bcae24f", @typed={0x8, 0x80, 0x0, 0x0, @u32}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=r12}, @generic="5909ed837d6cdf31f4c2d577eeebf33495077f795217e8bf82c99bf1c75700733f8db55c8a0d8f8ff8815f3ca38b86481a8ea174028c730e8a3dfd091a19d0da1ef9ef288a91b91afab2ac2cc92c00882f9df93959b5da24ccf0a34c8fc3f956ad65734574de015e75684b392e674608723dd24bbea034ce693753ad196cfc1e51a5dc37e8d149e607c61a20c4184978036dba6dca52f7edc1463cd45a87e9512d617343a7b0"]}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @nested={0x14, 0x75, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x92, 0x0, 0x0, @u32}]}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x25c}, {&(0x7f0000001080)={0x24c, 0x3d, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0x23a, 0x2e, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=r13}, @generic="4e69f509804a550a337e157b3af3dfda3f3150b8aff7346b62d9f2cab31d9fa03fb1869050505477f73b5159f6bf95b0dfeb527f3aa2012d8eb2d5a2236a04043df6b6aaf057ede5413d65558c49fb3033e46f5016386b237eae92641eaa0cab80227cfe55e635055cdaa5395ca8188a6c8f7ea98dbe5ef64cc086b62ca12d2c2b42450bab2f1f566daf4221c2be5828061eca96888c4a5c9dfe9b7d535860e632452f3efeb9c70cb87e73d810b986e0fec093a2b0f7bfa38d6bb4c93eaeb510015994da01e3997a460384d64a52bfc3e4fb1c66096fd3e4b0182aa79e5a55c2ebea61648c2b57", @generic="28fd3926e1624554b3b0383b6280538d6885544c2a207c7201c0382441516e0eb51f2c7356713fb87d9c628a37d8889f5d476ffcc956c82a25844db676adbd7ac2b24d7db8906896b2f9cfdd05b10204cbe052781ed2546a729b9ac844762f1b26e42d60670d1e56c791c9ea46166fd3f67f503ef527f95fe5f87fb331a57d3388b7310e4e593b431cd3abbb597a7a3bdc03ae", @generic="b9d3d5861cca90aab4ecf4552063f4db46973f645c500b573f3ff9282989d979ec1e674399f646b727eff5893f9a953441ba2f816b5f2d0ab4698b02752552a019b1f9867d3f64e752c7fb8a7ca3b54a3772", @typed={0x8, 0x71, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r15}, @generic="1074f326cda38f3b23095cdb117cd5bc9916a481a6f664696b006fdfb8126c9bd606470c68521c5230c32435ef6206b702726c555aaa072a5e12a21dfd2ab9f73c907ef30e200817992b3aeebc98", @typed={0x4, 0x55}]}]}, 0x24c}, {&(0x7f0000003580)={0x284, 0x31, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x259, 0x19, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="fc4130bb4a354d94a495867224b90c5e5c6e7d7c0519c565b95413344b461557bdb98467a06589e559a2e8aa8eb0be2f975b8744db35b0a8d97e272caad0e08d7d7d8bc8b300c76404d497bddb00ff436418dd3b492b8abbc1f6ae49030aeeafa76b245d3763303ec77f404a4a9aa80a6e25dc45d0188091816dcde9d9195d35a657d6a03291eb842bcdafbb2bc453dbd478760aa9ebf72592fabaad8685101f50c792e3594ea2e983a740503f74e871b1daf1329f11d28077a65c64c44cb660be59dd8b30c12bda04fc65005181876ef3b1", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@remote}, @generic="4b6660db0f41224aba8d621824bcbaa34a28b1355582abe64be116c93db0a7eed86d94273a836ebc7827328789998d0a1a0260a5208b24e6c5674cb26c4355ed31adab97f8ee71862282a5815973906440c11bdfc4c25c50ad9ee06992051e7851d586e99c9d", @generic="21861677cce1dadbd40a3f075e2dfd209655ed1eaaa7b2d382015379b14b3649df384ba9df28d6848a42179ac9caf5659cebb45a04f4a21ba9b76b488c0cea719e2350d0153feb80fae7539d592a4f87b4505dd52f837845f767107080839dde68f0fd3e45f337e95b19a24919156afbfa894f6a9dffea6625c5de760fb3c966c0a05d33357af2f430b168", @typed={0x8, 0x21, 0x0, 0x0, @uid=r16}, @generic="75456536d0d8b7bcbb86176b805d5caa6042ddb4f734c91cc0565e9a451285cfd362e317975d9539e304731068ccc0dda99be9e16929107bf5296fbc9715df9ca5fc85d845a150422a07f62a4557d210af422de1b4647312d2aa58951f9422711e76e615479649f4e3732bb5edc4f3545813", @typed={0x8, 0x0, 0x0, 0x0, @pid=r17}]}, @typed={0x15, 0x8a, 0x0, 0x0, @binary="aee53adca4fe7070cfe58baf53906c2f06"}]}, 0x284}], 0x6, 0x0, 0x0, 0x4040001}, 0x24040000)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24014004}, 0x4000) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24014004}, 0x4000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:51:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xc423)

[ 3147.599119][ T2013] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0xa, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:04 executing program 3:
syz_emit_ethernet(0x30b, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffeb8922e281f586dd60b9fde102d5610000000000000000000000000000000001ff"], 0x0)

11:51:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26100e2805"], 0x398}}, 0x0)

[ 3148.127512][ T2025] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
11:51:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x30000)

[ 3148.299637][ T2029] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:05 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private0}, 0x0, @in6=@dev, 0x0, 0x4}}, 0xe8)

11:51:05 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x9, 0x1) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r8, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}]}]}, 0x30}}, 0x20000014)
sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5110018}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r8, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfb14}]}, 0x60}}, 0xc810) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={<r10=>0x0}, &(0x7f00000004c0)=0xc) (async)
r11 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r11, 0x0, &(0x7f0000000500)) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000580)={0x0, <r12=>0x0}) (async)
read$FUSE(r7, &(0x7f0000001540)={0x2020, 0x0, 0x0, <r13=>0x0}, 0x2020)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000600)=<r14=>0x0) (async)
r15 = openat$damon_attrs(0xffffffffffffff9c, &(0x7f0000001040), 0xe88a9f56b536100d, 0x20) (async)
fstat(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r17, 0x0, &(0x7f0000000500)) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc, &(0x7f0000001380)=[{&(0x7f0000000440)={0x2c, 0x14, 0x400, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x56, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x75, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}, {&(0x7f0000000680)={0x1a4, 0x1e, 0x200, 0x70bd29, 0x25dfdbfc, "", [@nested={0xea, 0x38, 0x0, 0x1, [@generic="f51ee83a20704b8d85cb3203eaf031007bda3d455d291a7284ff000dd65d32a934cee5c0d8546a7d67909e2e5bb41e8ae1a2c7545c40498d233fe7f3b97b0f460dcd017b716f96220e95348e0dc4fb972ae86343ff4203badf7196e9919f53e96a73bbd0c6ef4d31afa8e049ff86a5dc42f65ede95852bb9f945c15a13cfa702d1422c14e1e60d579086db3bdf6012268a9aaac742ade08359c592a903758a602211d32b258ef74832959e86c8d4d66dfce7ef3b1ba2f2ced0ce252b675917932e71cf1c928cc7c106b6ba0d77d0cecd9f13799560a040d7dd6ff59be47bca3cb3cbe1168ed5"]}, @typed={0x8, 0x4b, 0x0, 0x0, @pid=r10}, @nested={0x7c, 0x8c, 0x0, 0x1, [@typed={0x8, 0x24, 0x0, 0x0, @pid}, @typed={0x8, 0x12, 0x0, 0x0, @u32=0xffffffff}, @generic="b2c61d7c2cb7a7b4681f2d951d2abf3f3604030fffccbaa084bd132b0760a875b46aa3e13244a19b36491b135065f48148b66be57a07ff9c5bb3cc5ab8701904497e06689cfa8556a49411aec9a0077e8daaaf46c52dc59e4d9644e96519775ee42cb3edfb343e75"]}, @typed={0x7, 0x53, 0x0, 0x0, @str='(/\x00'}, @generic, @generic="4661159ba65a6672e2f5155abec49ec9f9f99e74c69e929bfd"]}, 0x1a4}, {&(0x7f0000000840)={0x550, 0x33, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@nested={0xff, 0x33, 0x0, 0x1, [@typed={0xc, 0x82, 0x0, 0x0, @u64=0xfffffffffffffa8c}, @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x3ff}, @generic="d12f88610a723f1eb5bf02f18e22a495df8acac0999a9f9757e4b14aac", @generic="0e2d9a56c18597b301ed0c7e88742372b2f1b057bdac80b1b36f05fb8a2b348ab2516f6c535198ff1b7fc20b81d6a1df8269df717ab6e6c0b84d5dc575255059b97eef627b283a3781bb5dab0e12793f67ce6233ac3491e88d8121de972467294d0d31d9f473c1bafcb0b0e4d983c99d1db617156628d59b28ae31abd6171ae5911444fd4f491b29d5172705e8d80a0e532bf49b009a079528d78f249f7f98d75d572051d62a22318053", @typed={0xc, 0x61, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x12, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="384cf68a1ed06109"]}, @nested={0x14e, 0x2e, 0x0, 0x1, [@generic="187141c58defc6cdd7dfa65930d71252984a20a23165ff138b7b6f458bd64e6a786d72867f65fc64df05e0eb2328c6f9c9755a17a8b27564e6e6ce195e1005c692ed52c8e02a54882c9d7d8fbb9139f6cdbeedef742a2a02d77dfd262d347fe8da0f4056e618fe17cd2131b57ff854f1de36237cd8a42fa4fea7046637bb335ea22d05dff1c32cc7d2c2c19b7cd5a5065b97e6f900ecd42f929fffcd814ba3dc9bc509e47730d08bff955ec203b8e515af2cbc", @generic="a1aa15d2b89f4b4660345bc625256989e5b14ebb3c4c04c325576ff596d33bdeafd7a6a511fa31940a90c1dd9ffe92ebe2bc0022b551d83f28e62e9c50599b7ee86ab34663f611955417c9007d239d631f370fc2c1f6902a122f44b239b0e4a2693257feadc5f426a117b242e184dab9970f023d791cc24689d7f72c8e9fdca8f87ed35726fd0d0b9a943a26541080dccedccccb0bf9da"]}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@local}, @typed={0xb, 0x415, 0x0, 0x0, @str='-\x8b{$$\'\x00'}, @nested={0x123, 0x2a, 0x0, 0x1, [@typed={0x1c, 0x70, 0x0, 0x0, @binary="422e15ed15d5c1851da367d0a2cb569871107984680c5c2a"}, @generic="8909eef8daeb3def67d10cd7cbce90d60978770665d3dc2eedb57da5bc4ad0b232bf809530c0c67e21071fda6f57047bcd8ebebb77230630333ef3897616acd173d1441f049af369fdfe56a23932a58c3b95a8e26391182b7cef58241da3363b7d8f2f139820b35c9283b6330f77933ebed9c1868e0a1ab616e45399586c6b065cc8f465032a621310", @generic="a71464662a870ca41d872cdbfb9d97252593bade106f9b0a47b8cb5472cbb690406f4fc51f045e0d2e5f144e493ad672e1e1112c4b85fbe7c96d0f3743443f11d8520165a11225539b1a011075cb3a025d5d6661fdc863c85ed2187d00d4207009bb5fae7a7c96d1eaa6270ba3", @generic="1791faa4a2d395983ead0350e6"]}, @nested={0x1b6, 0x12, 0x0, 0x1, [@typed={0xc, 0x86, 0x0, 0x0, @u64=0x3}, @typed={0x85, 0x68, 0x0, 0x0, @binary="1b110665ccd9b9ed18db5b2b330d6c8d8b3cc3c7e3cbf948d701a6e638d0092f0722bc8009192aba13b8d0d450a20d4e472daaf14c8643147e8da688e78a38cb7c185c460acb8819896eed276be463eabbb82315aa78f384522b434f27067e7d453e42524842acdd040926fcce1a70eb02b5b2dc43a5fb1bbac389b3f2eed33091"}, @generic="056774e2d9821d1eb2230255002c008b1b5b4d9a79202e89ff18aa10f6e72f70d3dfed804b", @generic="392261a7b4964b9c204a833a2c422dc8d45da3ff2c72f3cb87a0f9010384652e7b1dd4e55716c1742fee1e3051043144122d590b78da1d71c45754725a1524be232de08e7d960fb952a07aad86dfc984b03ff1f58eee0978444c68bccd55b1c723960827dc2751f75d54e97e2781cc7f7d0610a5cf230dc385c7e2c9307042bf0109f260abe7da250285e248a7ddc81913b31a0ad8de0203e8d1c85e59bba70acdfc3cdeda6711eb6388e17369f4f9a21f62debe5348e96b7dfa68d715c2f84b9e82df32ac5046994f1636afb33864c2524f93cedd5833fe20395dfac530811de7c9b24ece5c7e505815de0820975bdea5402e1c0b16115424"]}]}, 0x550}, {&(0x7f0000000dc0)={0x25c, 0x1d, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="3cb1c8d31b166e549e3daa5bc71049c72389c33caa7ce833", @generic="e611d02f5c9d8a2d2cdb9a6943bc1f5c829daa55d8fb284912be47e19ff36249bbb0fee10e84a72c4c0e1209738fc329e94d07c76a47d247990d3c2f3380a7c40475e6e422ca556218bcb414f5b58f7813f75feaa9871b7d6479db32907985cfafb3f5e07c7c8e46f751d42245a9f9bd607f513ff7deaf2826df02a2abb421ff033ee40ca77761872e5c26a6a11f4231437ea14f10e5cc27", @generic="5f3cc57b01ac07e70aff5546b30980f9841a649c487daedfe6e24f684d9aff25f8599ae597d9c602057305fa46995d6443c7830a95a74fb717dfa8556667", @nested={0x129, 0x19, 0x0, 0x1, [@generic="02e6f347530986d128ab4f9c86cf912f0710e2596e8ee069edc44311cfaae9cb", @generic="e73fff7d15342b6cf334ac4a4f8a268945d6eb9150722cf23c701ef5d610f4616c7366fc77eb8f82933eea2b243c4c7b8af00d3e7b665a4bcae24f", @typed={0x8, 0x80, 0x0, 0x0, @u32}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x49, 0x0, 0x0, @pid=r11}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=r12}, @generic="5909ed837d6cdf31f4c2d577eeebf33495077f795217e8bf82c99bf1c75700733f8db55c8a0d8f8ff8815f3ca38b86481a8ea174028c730e8a3dfd091a19d0da1ef9ef288a91b91afab2ac2cc92c00882f9df93959b5da24ccf0a34c8fc3f956ad65734574de015e75684b392e674608723dd24bbea034ce693753ad196cfc1e51a5dc37e8d149e607c61a20c4184978036dba6dca52f7edc1463cd45a87e9512d617343a7b0"]}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @nested={0x14, 0x75, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x8, 0x92, 0x0, 0x0, @u32}]}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}}]}, 0x25c}, {&(0x7f0000001080)={0x24c, 0x3d, 0x400, 0x70bd2a, 0x25dfdbff, "", [@nested={0x23a, 0x2e, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid=r13}, @generic="4e69f509804a550a337e157b3af3dfda3f3150b8aff7346b62d9f2cab31d9fa03fb1869050505477f73b5159f6bf95b0dfeb527f3aa2012d8eb2d5a2236a04043df6b6aaf057ede5413d65558c49fb3033e46f5016386b237eae92641eaa0cab80227cfe55e635055cdaa5395ca8188a6c8f7ea98dbe5ef64cc086b62ca12d2c2b42450bab2f1f566daf4221c2be5828061eca96888c4a5c9dfe9b7d535860e632452f3efeb9c70cb87e73d810b986e0fec093a2b0f7bfa38d6bb4c93eaeb510015994da01e3997a460384d64a52bfc3e4fb1c66096fd3e4b0182aa79e5a55c2ebea61648c2b57", @generic="28fd3926e1624554b3b0383b6280538d6885544c2a207c7201c0382441516e0eb51f2c7356713fb87d9c628a37d8889f5d476ffcc956c82a25844db676adbd7ac2b24d7db8906896b2f9cfdd05b10204cbe052781ed2546a729b9ac844762f1b26e42d60670d1e56c791c9ea46166fd3f67f503ef527f95fe5f87fb331a57d3388b7310e4e593b431cd3abbb597a7a3bdc03ae", @generic="b9d3d5861cca90aab4ecf4552063f4db46973f645c500b573f3ff9282989d979ec1e674399f646b727eff5893f9a953441ba2f816b5f2d0ab4698b02752552a019b1f9867d3f64e752c7fb8a7ca3b54a3772", @typed={0x8, 0x71, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x4, 0x0, 0x0, @fd=r15}, @generic="1074f326cda38f3b23095cdb117cd5bc9916a481a6f664696b006fdfb8126c9bd606470c68521c5230c32435ef6206b702726c555aaa072a5e12a21dfd2ab9f73c907ef30e200817992b3aeebc98", @typed={0x4, 0x55}]}]}, 0x24c}, {&(0x7f0000003580)={0x284, 0x31, 0x800, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x259, 0x19, 0x0, 0x1, [@typed={0x8, 0x7e, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="fc4130bb4a354d94a495867224b90c5e5c6e7d7c0519c565b95413344b461557bdb98467a06589e559a2e8aa8eb0be2f975b8744db35b0a8d97e272caad0e08d7d7d8bc8b300c76404d497bddb00ff436418dd3b492b8abbc1f6ae49030aeeafa76b245d3763303ec77f404a4a9aa80a6e25dc45d0188091816dcde9d9195d35a657d6a03291eb842bcdafbb2bc453dbd478760aa9ebf72592fabaad8685101f50c792e3594ea2e983a740503f74e871b1daf1329f11d28077a65c64c44cb660be59dd8b30c12bda04fc65005181876ef3b1", @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@remote}, @generic="4b6660db0f41224aba8d621824bcbaa34a28b1355582abe64be116c93db0a7eed86d94273a836ebc7827328789998d0a1a0260a5208b24e6c5674cb26c4355ed31adab97f8ee71862282a5815973906440c11bdfc4c25c50ad9ee06992051e7851d586e99c9d", @generic="21861677cce1dadbd40a3f075e2dfd209655ed1eaaa7b2d382015379b14b3649df384ba9df28d6848a42179ac9caf5659cebb45a04f4a21ba9b76b488c0cea719e2350d0153feb80fae7539d592a4f87b4505dd52f837845f767107080839dde68f0fd3e45f337e95b19a24919156afbfa894f6a9dffea6625c5de760fb3c966c0a05d33357af2f430b168", @typed={0x8, 0x21, 0x0, 0x0, @uid=r16}, @generic="75456536d0d8b7bcbb86176b805d5caa6042ddb4f734c91cc0565e9a451285cfd362e317975d9539e304731068ccc0dda99be9e16929107bf5296fbc9715df9ca5fc85d845a150422a07f62a4557d210af422de1b4647312d2aa58951f9422711e76e615479649f4e3732bb5edc4f3545813", @typed={0x8, 0x0, 0x0, 0x0, @pid=r17}]}, @typed={0x15, 0x8a, 0x0, 0x0, @binary="aee53adca4fe7070cfe58baf53906c2f06"}]}, 0x284}], 0x6, 0x0, 0x0, 0x4040001}, 0x24040000) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x23}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24014004}, 0x4000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:51:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0xb, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26180e2805"], 0x398}}, 0x0)

11:51:05 executing program 5:
syz_open_dev$loop(&(0x7f0000000480), 0xffffffffffffffff, 0x0)

11:51:05 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x34000)

[ 3148.857293][ T2043] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
11:51:06 executing program 3:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

11:51:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

[ 3149.008239][ T2047] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x10, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:06 executing program 5:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
connect$unix(r0, 0x0, 0x0)

11:51:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26200e2805"], 0x398}}, 0x0)

11:51:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x400300)

11:51:06 executing program 3:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)="b7beebaf5b5697a11c2a7e5f18fa0f5ce18cac10c25c877d396c829df3e10033b6803836d821211359ab362900"/57, 0x39, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000240)={0x0, 0xfb, 0x39, 0x0, 0x0, "eee1cd53378bb3770ed6f0ca03f18cc8", "00d0015357b93f66a137b3fa983c192f0d1c0c10f69b517d711a6e1890fdd1fdc95381ec"}, 0x39, 0x0)

11:51:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000) (async)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

[ 3149.447109][ T2060] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 3149.455820][ T2060] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:06 executing program 5:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 3149.603429][ T2062] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x11, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26380e2805"], 0x398}}, 0x0)

11:51:07 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x4, &(0x7f0000000240)=@gcm_256={{}, "64e58f0c34cd845a", "f6801dd6536065d44af18bf5b25c7d901c7930583a85b1175fd47c10f428f11a", "59b68823", "7bd847e8df57bac9"}, 0x38)

11:51:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x1000000)

11:51:07 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000) (async)
r3 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:51:07 executing program 5:
truncate(&(0x7f0000000340)='./file0/file0\x00', 0x0)

[ 3150.105322][ T2076] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 3150.114660][ T2076] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[ 3150.258201][ T2079] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x13, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26400e2805"], 0x398}}, 0x0)

11:51:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x183002, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x108, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc33}, {0xc, 0x90, 0x1a9}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x810)

11:51:07 executing program 3:
clock_gettime(0x0, &(0x7f0000001300))

11:51:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x2000000)

11:51:07 executing program 5:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x2, &(0x7f0000000140)=@raw=[@map_val], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x1ff}}, './file0\x00'})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0x3ff, 0x401, 0x20, r1, 0x400000, '\x00', 0x0, r1, 0x2, 0x1, 0x1, 0xc}, 0x48)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1d, 0xf, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfff}, @jmp={0x5, 0x0, 0xb, 0xa, 0x4, 0xffffffffffffffff, 0x10}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @generic={0x15, 0xe, 0x8, 0x20a, 0x8}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8000}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000640)='syzkaller\x00', 0x1000, 0xc5, &(0x7f0000000680)=""/197, 0x41000, 0x0, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x10, 0x3f}, 0x10}, 0x80)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x1ff, 0x3f}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'})
epoll_create(0x9bd)

[ 3150.735611][ T2092] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
[ 3150.744298][ T2092] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[ 3150.924983][ T2104] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x34, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:08 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x0, 0x4, 0x8, 0x0, 0x1}, 0x48)

11:51:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x183002, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x108, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc33}, {0xc, 0x90, 0x1a9}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x810)

11:51:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26480e2805"], 0x398}}, 0x0)

11:51:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x3000000)

[ 3151.473350][ T2110] netlink: 'syz-executor.2': attribute type 3 has an invalid length.
11:51:08 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000800000000000031d300e795"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
getpeername$packet(r1, 0x0, &(0x7f0000000400))

[ 3151.605408][ T2121] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:08 executing program 5:
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@map, 0xffffffffffffffff, 0xa}, 0x10)

11:51:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x44, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26500e2805"], 0x398}}, 0x0)

11:51:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x4000000)

[ 3152.245427][ T2136] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0x1, 0x4, 0x0, 0x62}, 0x48)

11:51:09 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$unix(r0, 0x0, 0x0, 0x20044004, &(0x7f0000000380)=@abs, 0x6e)

11:51:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x5, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26580e2805"], 0x398}}, 0x0)

11:51:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x183002, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x108, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc33}, {0xc, 0x90, 0x1a9}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x810) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x108, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x401}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1000}, {0xc, 0x90, 0x3ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc33}, {0xc, 0x90, 0x1a9}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x810)

11:51:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x5000000)

11:51:09 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x8, 0x0, 0xfae7}, 0x48)

11:51:10 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x0, 0x0, 0xfae7}, 0x48)

11:51:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x6, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26600e2805"], 0x398}}, 0x0)

11:51:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x6000000)

11:51:10 executing program 3:
syz_emit_ethernet(0xe81, &(0x7f00000001c0)={@dev, @link_local, @val={@void, {0x8100, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0x0, 0x6, "750250", 0xe47, 0x6, 0x0, @loopback, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"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"}}}}}}}}, 0x0)

11:51:10 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14df00", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

11:51:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48005}}, 0x20}}, 0x0)

[ 3153.540565][ T2171] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:10 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x0, 0x7c, 0x0, 0x1}, 0x48)

11:51:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x8, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26680e2805"], 0x398}}, 0x0)

11:51:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x7000000)

11:51:10 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=@base={0xf}, 0x48)

11:51:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14df00", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

[ 3154.115845][ T2189] netlink: 'syz-executor.2': attribute type 8 has an invalid length.
[ 3154.145575][ T2190] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:11 executing program 3:
syz_emit_ethernet(0xe, &(0x7f0000000000)={@local, @local, @void}, 0x0)

11:51:11 executing program 5:
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x403, 0x0)

11:51:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x9, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26700e2805"], 0x398}}, 0x0)

11:51:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000000)

11:51:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14df00", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async)
sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14df00", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)

[ 3154.707654][ T2204] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:11 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e)

11:51:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xa, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:11 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x24, &(0x7f0000000240)=@gcm_256={{}, "64e58f0c34cd845a", "f6801dd6536065d44af18bf5b25c7d901c7930583a85b1175fd47c10f428f11a", "59b68823", "7bd847e8df57bac9"}, 0x38)

11:51:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x9000000)

11:51:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26900e2805"], 0x398}}, 0x0)

11:51:12 executing program 1:
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"e9fe7741db91978712341a6012b29700", 0x0, <r0=>0x0, {0x5, 0x5}, {0x3ff, 0xffff}, 0x0, [0x1, 0x8, 0x2, 0x6, 0xb0, 0x5, 0xffffffff00000000, 0xf99, 0xff7, 0x730, 0x100000001, 0xffffffff, 0x0, 0x20, 0x3, 0x3]})
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000340)='veth0_macvtap\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r1}, r3, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r4})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"9b307820d2572c0fdcad72cf31627cb3", r0, r3, {0x2, 0x2}, {0x2, 0xfff}, 0x10000, [0x1, 0x2, 0x6, 0x4, 0x841, 0x5, 0x282, 0xfffffffffffffffd, 0x4, 0x3f, 0x6, 0x22, 0x9, 0x9, 0x0, 0x7f]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000440000010800030055e99727439861487931298a4b4b4189fabaf38ab95d42d47245db9d37ca4a214fa3a40ef7b2cc6b278f5bd04343a2902e4b81b68f2c2bbbe8e185871986425e2483e31d6204b6000000000000000000", @ANYRES32=r9, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:51:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3155.317050][ T2230] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:12 executing program 5:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:51:12 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x4b64, &(0x7f0000000040))

11:51:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xf000000)

11:51:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26980e2805"], 0x398}}, 0x0)

[ 3155.607390][ T2232] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
11:51:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x10, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0xc0189436, 0x0)

11:51:13 executing program 1:
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"e9fe7741db91978712341a6012b29700", 0x0, <r0=>0x0, {0x5, 0x5}, {0x3ff, 0xffff}, 0x0, [0x1, 0x8, 0x2, 0x6, 0xb0, 0x5, 0xffffffff00000000, 0xf99, 0xff7, 0x730, 0x100000001, 0xffffffff, 0x0, 0x20, 0x3, 0x3]})
accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) (async)
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000340)='veth0_macvtap\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r1}, r3, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r4}) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r1}, r3, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r4})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"9b307820d2572c0fdcad72cf31627cb3", r0, r3, {0x2, 0x2}, {0x2, 0xfff}, 0x10000, [0x1, 0x2, 0x6, 0x4, 0x841, 0x5, 0x282, 0xfffffffffffffffd, 0x4, 0x3f, 0x6, 0x22, 0x9, 0x9, 0x0, 0x7f]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) (async)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000440000010800030055e99727439861487931298a4b4b4189fabaf38ab95d42d47245db9d37ca4a214fa3a40ef7b2cc6b278f5bd04343a2902e4b81b68f2c2bbbe8e185871986425e2483e31d6204b6000000000000000000", @ANYRES32=r9, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

11:51:13 executing program 3:
syz_open_dev$vcsu(&(0x7f0000000240), 0x0, 0x10e42)

[ 3155.967784][ T2245] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x1c000000)

[ 3156.140127][ T2247] netlink: 'syz-executor.2': attribute type 16 has an invalid length.
11:51:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26ac0e2805"], 0x398}}, 0x0)

11:51:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x11, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3156.340481][ T2251] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
11:51:13 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x540c, 0x0)

11:51:13 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x5416, 0x0)

11:51:13 executing program 1:
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"e9fe7741db91978712341a6012b29700", 0x0, <r0=>0x0, {0x5, 0x5}, {0x3ff, 0xffff}, 0x0, [0x1, 0x8, 0x2, 0x6, 0xb0, 0x5, 0xffffffff00000000, 0xf99, 0xff7, 0x730, 0x100000001, 0xffffffff, 0x0, 0x20, 0x3, 0x3]})
r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000340)='veth0_macvtap\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, <r3=>0x0})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r1}, r3, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r4})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"9b307820d2572c0fdcad72cf31627cb3", r0, r3, {0x2, 0x2}, {0x2, 0xfff}, 0x10000, [0x1, 0x2, 0x6, 0x4, 0x841, 0x5, 0x282, 0xfffffffffffffffd, 0x4, 0x3f, 0x6, 0x22, 0x9, 0x9, 0x0, 0x7f]})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000440000010800030055e99727439861487931298a4b4b4189fabaf38ab95d42d47245db9d37ca4a214fa3a40ef7b2cc6b278f5bd04343a2902e4b81b68f2c2bbbe8e185871986425e2483e31d6204b6000000000000000000", @ANYRES32=r9, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"e9fe7741db91978712341a6012b29700", 0x0, 0x0, {0x5, 0x5}, {0x3ff, 0xffff}, 0x0, [0x1, 0x8, 0x2, 0x6, 0xb0, 0x5, 0xffffffff00000000, 0xf99, 0xff7, 0x730, 0x100000001, 0xffffffff, 0x0, 0x20, 0x3, 0x3]}) (async)
accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0xb00, &(0x7f0000000340)='veth0_macvtap\x00'}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{r1}, r3, 0x3, @unused=[0x7, 0xb55e, 0x2, 0x5], @devid=r4}) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000180)={"9b307820d2572c0fdcad72cf31627cb3", r0, r3, {0x2, 0x2}, {0x2, 0xfff}, 0x10000, [0x1, 0x2, 0x6, 0x4, 0x841, 0x5, 0x282, 0xfffffffffffffffd, 0x4, 0x3f, 0x6, 0x22, 0x9, 0x9, 0x0, 0x7f]}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x4}, 0x10) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001c40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000440000010800030055e99727439861487931298a4b4b4189fabaf38ab95d42d47245db9d37ca4a214fa3a40ef7b2cc6b278f5bd04343a2902e4b81b68f2c2bbbe8e185871986425e2483e31d6204b6000000000000000000", @ANYRES32=r9, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0) (async)

[ 3156.573755][ T2259] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x30000000)

11:51:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26006a2805"], 0x398}}, 0x0)

11:51:14 executing program 5:
rt_sigaction(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200))

11:51:14 executing program 3:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {0x20}]})

[ 3156.949945][ T2267] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
11:51:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x13, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x60000000)

11:51:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608022805"], 0x398}}, 0x0)

11:51:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x4108}}}, 0x1c}}, 0x0)

11:51:14 executing program 5:
rt_sigaction(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200))

11:51:14 executing program 1:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0xcc, 0x90, 0x80, 0x2c, 0x35c, 0xfffffffe, 0x37f, 0x5}, "589009c71e354b1a83fe39ffcbb75a5bb0b45159799b36fb8182a5f8d747c8894c2bbd927043241f41931d39b8a3f5b6c4ab805d46f3cf662b0e082d5e3d0efa1abfcc046c7c3226fd8bcfb373d04380ed", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x571)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xf, 0x6, 0x7fff, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000900030073797a30000000000900010073797a31000000000900030073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = dup3(r0, r0, 0x80000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xf6, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)

[ 3157.654386][ T2293] __nla_validate_parse: 1 callbacks suppressed
[ 3157.654463][ T2293] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x117, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:14 executing program 5:
rt_sigaction(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200))

11:51:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xc4230000)

11:51:15 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x5603, &(0x7f0000000040))

11:51:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608032805"], 0x398}}, 0x0)

11:51:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x146, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3158.242654][ T2316] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:15 executing program 5:
rt_sigaction(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200))

11:51:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x300}, 0x0)

11:51:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xf0ffffff)

11:51:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608042805"], 0x398}}, 0x0)

11:51:15 executing program 1:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0xcc, 0x90, 0x80, 0x2c, 0x35c, 0xfffffffe, 0x37f, 0x5}, "589009c71e354b1a83fe39ffcbb75a5bb0b45159799b36fb8182a5f8d747c8894c2bbd927043241f41931d39b8a3f5b6c4ab805d46f3cf662b0e082d5e3d0efa1abfcc046c7c3226fd8bcfb373d04380ed", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x571) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0xf, 0x6, 0x7fff, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000900030073797a30000000000900010073797a31000000000900030073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = dup3(r0, r0, 0x80000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (rerun: 64)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xf6, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)

11:51:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:16 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, r0)

11:51:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xff600000)

11:51:16 executing program 3:
clock_gettime(0x1, &(0x7f0000000900))

11:51:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608052805"], 0x398}}, 0x0)

11:51:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x8, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:16 executing program 1:
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0xcc, 0x90, 0x80, 0x2c, 0x35c, 0xfffffffe, 0x37f, 0x5}, "589009c71e354b1a83fe39ffcbb75a5bb0b45159799b36fb8182a5f8d747c8894c2bbd927043241f41931d39b8a3f5b6c4ab805d46f3cf662b0e082d5e3d0efa1abfcc046c7c3226fd8bcfb373d04380ed", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x571)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0xf, 0x6, 0x7fff, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000482af6fe76b285ee66ed624e5d926add14071fb073e07d710849f02846a9958d21701cc63264e2bb3f03ec0486b6d894b8847c2b0d3aa098d4499e3287f65dd358b92241a512813ee3b700b5bdbc593aa295e0bc2f4c8b026e8f601f7ed3bbc925af329d5b189faf831c870384c5821f37b8560b7322d85d3c2e79421e116620d2f624089dae7cd41b60e426c8f7cd92e3a303fcb3a3d2deb987c298806346ae933a76bb58a710363e9ebc499db5bbe0be1d460c8952c475e7b4ae7f8f90f7f987510057732456a8c022d8a7dc2c58ed5089af73fbec8f3b89fc9eb4eb5350aefa67faa055a46bc7311728e0084dff9c194fe80c1cc2e1a2231b40a35029c3d683d33ab8129057d4", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000900030073797a30000000000900010073797a31000000000900030073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = dup3(r0, r0, 0x80000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xf6, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)={{0xcc, 0x90, 0x80, 0x2c, 0x35c, 0xfffffffe, 0x37f, 0x5}, "589009c71e354b1a83fe39ffcbb75a5bb0b45159799b36fb8182a5f8d747c8894c2bbd927043241f41931d39b8a3f5b6c4ab805d46f3cf662b0e082d5e3d0efa1abfcc046c7c3226fd8bcfb373d04380ed", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x571) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$team(&(0x7f0000000040), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair(0xf, 0x6, 0x7fff, &(0x7f0000000200)) (async)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf25010000000900030073797a30000000000900010073797a31000000000900030073797a3000000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
dup3(r0, r0, 0x80000) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000280)=r6, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x40}}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r8, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xf6, 0x21}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) (async)

11:51:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xffffff7f)

11:51:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8907, 0x0)

11:51:16 executing program 5:
io_setup(0x3f, &(0x7f0000003740)=<r0=>0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}])

[ 3159.518466][ T2351] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3159.682853][ T2355] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608062805"], 0x398}}, 0x0)

11:51:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xfffffff0)

11:51:17 executing program 3:
request_key(&(0x7f0000001580)='big_key\x00', &(0x7f00000015c0)={'syz', 0x0}, 0x0, 0x0)

11:51:17 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x4bfb, &(0x7f0000000000)={0xf57e})

[ 3160.094341][ T2369] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000876baf777b998000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

[ 3160.260699][ T2371] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
11:51:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608072805"], 0x398}}, 0x0)

11:51:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x10, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x60ffffffffff)

[ 3160.535542][ T2378] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
11:51:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r1, 0x201, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0)

11:51:17 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x63, 0x32, 0x33, 0x34, 0xb, 0x35, 0x32, 0x36, 0x36, 0x65, 0x0, 0x36, 0xb877037d6c2716e5]}, &(0x7f0000000540)={0x0, "684dd8d5549dd3809772c496a2e0481f4709e5c0f3db7350349505f1a3f9282d97f2760da079aea09cd89b2a35e85fa628395fc581ba8afbf029b9bad42d80bb"}, 0x48, r0)

11:51:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000876baf777b998000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

[ 3160.707630][ T2381] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3160.829912][ T2383] netlink: 'syz-executor.2': attribute type 16 has an invalid length.
11:51:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x117, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608082805"], 0x398}}, 0x0)

11:51:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8941, &(0x7f0000000c80)={'wg0\x00'})

11:51:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x3000000000000)

11:51:18 executing program 5:
pipe2(&(0x7f00000033c0)={<r0=>0xffffffffffffffff}, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000)

[ 3161.458076][ T2398] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x146, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:18 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x4b36, 0x0)

11:51:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8949, &(0x7f0000000c80)={'wg0\x00'})

11:51:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x40030000000000)

11:51:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608092805"], 0x398}}, 0x0)

11:51:19 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000440000000876baf777b998000300", @ANYRES32=r3, @ANYBLOB="2400238008000b000000000006001200ffff0000080014000000000006001b0000000000"], 0x40}}, 0x0)

[ 3162.085523][ T2413] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:19 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x20)

11:51:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x100000000000000)

11:51:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080a2805"], 0x398}}, 0x0)

11:51:19 executing program 5:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/block/loop0', 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)

11:51:19 executing program 3:
r0 = add_key$keyring(&(0x7f0000001240), &(0x7f0000001280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$assume_authority(0x3, r0)

11:51:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES32=r1, @ANYBLOB="800002000a00020001"], 0x28}}, 0x0)

11:51:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:19 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x0, 0xc0ad])

11:51:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080b2805"], 0x398}}, 0x0)

11:51:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x200000000000000)

11:51:20 executing program 1:
r0 = socket$inet6(0xa, 0x3, 0x2c)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@routing, 0x8)
setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0)

11:51:20 executing program 3:
syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x10d000)

[ 3163.154978][ T2437] __nla_validate_parse: 2 callbacks suppressed
[ 3163.155055][ T2437] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:20 executing program 5:
syz_open_dev$evdev(&(0x7f0000000000), 0x800000800e3, 0x64c00)

11:51:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080c2805"], 0x398}}, 0x0)

11:51:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x300000000000000)

11:51:20 executing program 1:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/zram-control', 0x601c1, 0x0)

11:51:20 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f00000011c0), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000014c0)={0x0, 0x0, 0x0})

11:51:20 executing program 5:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x4b, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x390, 0xffffffff, 0x1a8, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@empty, @local, [], [], 'vlan0\x00', 'batadv0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'wlan0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bec14025b750198c56e7cb53728906e0085f6632d1533b90cdb89561833fea744590c97cc452761be4552767674a8080bbca60c33641e60efab5d5a3416d1a6e"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)

11:51:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080d2805"], 0x398}}, 0x0)

11:51:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x400000000000000)

11:51:21 executing program 1:
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x0)

11:51:21 executing program 3:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop5', 0x389200, 0x0)

11:51:21 executing program 5:
msgsnd(0xffffffffffffffff, &(0x7f0000000000)={0x1, "bd3b9d4f3a25158f877166908b954bff2e12e688ce2801937db5c1734af2a98d638eeca67622f9bbf443ccf9a45ed54014e2ada0c3"}, 0x3d, 0x800)
msgsnd(0xffffffffffffffff, &(0x7f0000000040)={0x2, "9f1b29932c1942c8b37d8e693463ae8a67b33336e07cf36154f30e08d3037560268ea47274967f31e81dc2892ea1785f3a95d6337504fc1fcc6987b099a71de597dbfacffaa0d9603f9319505452b69036c4e22cbb7e673086cf5617546a498c50d295fd2c2b359e98575bddab5a0667b3ef3e7159921c36712459439a148f32c223d1e185cd5e986a983636abd88e4fd3bea1e5ec0c3d9c882e27a038385a6d414f1e03c5bad19e1421363358b0ab8abea252096b3aed4b0d1255a9d9c991134720703e2b65edcf03ecf3fe161d6adfdd46ee1c765d013dc2708658e72e2a16da78ef00ea2e9174d8b00d5b72"}, 0xf5, 0x0)
r0 = msgget$private(0x0, 0x588)
msgrcv(r0, &(0x7f0000000140)={0x0, ""/224}, 0xe8, 0xd848b7ed69a9e923, 0x800)
msgrcv(r0, &(0x7f0000000240)={0x0, ""/3}, 0xb, 0x2, 0x1000)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/4096}, 0x1008, 0x2, 0x1000)
msgrcv(r0, &(0x7f00000012c0)={0x0, ""/213}, 0xdd, 0x1, 0x0)
msgsnd(r0, &(0x7f00000013c0)={0x1, "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"}, 0x106, 0x0)
msgget$private(0x0, 0x0)
msgrcv(r0, &(0x7f0000001500)={0x0, ""/110}, 0x76, 0x3, 0x1800)
r1 = msgget(0x1, 0x22)
msgget$private(0x0, 0x4c)
msgsnd(r1, &(0x7f0000001580)={0x3, "f5a39f146faa3ba0133f6236d8704dc32c5e1020620806dcc5b5bf7524e48d83aac4433c51be1f8b42e5773c767250f365eb97db525645888f66099c8e1ef63af5ca9c44c31bead37c3bc40b2beea9c8aa1cc71cfaec07e2995862b6e9d303f04f251b0675666f055773deef12c0c2f2e0745cbac815f6c718d07ead32f8e72b5f3290f11194ec9787d1b84c38eb4888c940ad0c2ed9cd7feede353735503722f9506f2e3139ac4d2d410d85d5b76ca4db83c643a2e01c29d1"}, 0xc1, 0x800)
msgsnd(0xffffffffffffffff, &(0x7f0000001680)={0x0, "6677965410e68a8ee982c88650aeb5c58f553799ee2c1b895ee4111410a928aeceb5f22eaa8aa832c8bc2fefd4c8e5a72db3f3e58d432e2eba000490802ac43c4db2846d1a4b7a52574ef40b57a446fdf959ba2f0f546a1c97b399dbba3e8cd7154149c0292d2013c545316d19b79cd50aef07c8ea2f7545b23ece0736eb3449d97626510114e7"}, 0x8f, 0x0)
msgrcv(r0, &(0x7f0000001740)={0x0, ""/134}, 0x8e, 0x1, 0x1000)
msgctl$IPC_RMID(r0, 0x0)
msgrcv(r0, &(0x7f0000001800)={0x0, ""/203}, 0xd3, 0x0, 0x1800)
r2 = msgget$private(0x0, 0x2)
msgsnd(r2, &(0x7f0000001900)={0x0, "4d953d69baac109ab7630d3628450161b9a330d6c4a1024e69878a3a07cc6d25f2abd27dd912e8935a7d8aceabed7212a955b0cc374091987b583c0148929a3fefc87f122fa758e25631915e10370f31f416c92bd48c82bb94da3c29c0b8d08ce539bc7cb77e82d9ebe5ad6492d54214d06cb99231c627b50381ecb996bc85bf1143c0d188c710996771d7c0da725ba773e2a8b66b4597ff38665f1cd5b10e2a68d117ceb24c403f29644d2b1bc9424490aa47278a2aff21611f94e47d11e8bc7d19fcd4475e8d379866a0cbab5fcf559f0473"}, 0xdb, 0x0)
r3 = msgget(0x3, 0x100)
msgrcv(r3, &(0x7f0000001a00)={0x0, ""/133}, 0x8d, 0x1, 0x800)
msgsnd(r0, &(0x7f0000001ac0)={0x1, "61fb4dc185c92f2658eb226c77da5f22d3e38b61b12af1b701fa541c6f6b4308a83a27a01dc99cb5edc39063849b34d884abd3dc5f06e3e8f391cd9eba5b9ebd443d0ac296b70a0ac3b70bcbfc357a30e701c69286eabdc4045891588989e85819e4f4ec968b1c37482395bf2d8b585f2b959598aa3867ddd7f723f55b5a8861c3095d3971fdee0534c41bc1c5442de9c2b75217a0ccc0e1f6cbe75c2d0a5a0b9d0b2a37d8fa1b70b8434f90d994e90e921281b966af58b578d8b1ebbdefbfb7b7739c9dfdccc5d3c5129b44d73459724d121a44f5677161f5b296136096c3a234a2b91249153d119f8e7b772701e9"}, 0xf7, 0x0)
r4 = msgget$private(0x0, 0x200)
msgsnd(r4, &(0x7f0000001bc0)={0x2, "40fd36a9fa1d9aae6c7e543b45afac91da804267b908dd4f892ba2f37d80c6ef4c817625c909a5a0e370a619590ada1d9c75853297137e15077fabd14011451ab3f482aaf5dbd5e3a1a01efde03b995a590c582c3f96060302e756d9ad991060fca5585fd51c2635775a6bc33aa5b8cdcbaecfc47bd2c1761ef29f1a5d14abd9dfc0bf2e28b5546b919893b7202664468a70c0c89e57ea86fcfd76a8f10f93574b43bae2b095c0bfdf9d1f6d77e4ca09c14325bcc53c496f516ecda356"}, 0xc5, 0x800)
r5 = msgget(0x3, 0x281)
msgsnd(r5, &(0x7f0000001cc0)={0x2, "b5e43212a8b4b2a01f17e33e7c5f06e6c54c013ad33f3d3300ad105ca413d2397c57b012d77c2529a3eaee8eef2e0220c27d55f14073fe2d5ee97bdd3140410cc11b6cd74d5e5ff641020a99126b7448df32a2b610a4ab87a89a8c241a6936ee9bcf017b7a270cdb736ea58d6342b88d9a08aacbea996b310b0c219328d3029c6bbf6505c881b2f87a99b7706626d5cbe13b5ec30117fea0ac7c45876a"}, 0xa5, 0x800)
r6 = msgget$private(0x0, 0x206)
msgsnd(r6, &(0x7f0000001d80)={0x1, "4f9b4c3a3a1fa817f981135a0e6fe6400966bb7cf3c7a1cf7c04623c"}, 0x24, 0x800)
msgrcv(r3, &(0x7f0000001dc0)={0x0, ""/250}, 0x102, 0x0, 0x1000)

[ 3164.373094][ T2465] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x500000000000000)

11:51:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:21 executing program 1:
r0 = syz_io_uring_setup(0x44c4, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/187, 0xbb}, {0x0}], 0x2)

11:51:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080e2805"], 0x398}}, 0x0)

11:51:21 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter, 0x48)

[ 3164.959617][ T2483] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:22 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)

11:51:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0xa}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:22 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000002280)='ns/pid\x00')

11:51:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080f2805"], 0x398}}, 0x0)

11:51:22 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, 0x0}, 0x80)

11:51:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x600000000000000)

11:51:22 executing program 5:
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', 0x0})

[ 3165.637442][ T2497] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x8ed, 0x4)

11:51:22 executing program 1:
syz_clone(0x2004300, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_get$pid(0x2, 0x0)

11:51:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0xb}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608102805"], 0x398}}, 0x0)

11:51:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x700000000000000)

11:51:23 executing program 5:
socket(0x10, 0x3, 0x41)

11:51:23 executing program 3:
r0 = socket(0x10, 0x3, 0x0)
getpeername$packet(r0, 0x0, &(0x7f0000000700))

[ 3166.218527][ T2510] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x10}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608112805"], 0x398}}, 0x0)

11:51:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x800000000000000)

11:51:23 executing program 3:
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000002c00))

11:51:23 executing program 1:
syz_clone(0x89804000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0x0, 0x2000)

11:51:23 executing program 5:
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000027c0)={0xffffffffffffffff, 0x0}, 0x20)

[ 3166.842425][ T2522] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x11}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x900000000000000)

11:51:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608122805"], 0x398}}, 0x0)

11:51:24 executing program 3:
capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:51:24 executing program 5:
syz_clone(0x553a22666000, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x13}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3167.457523][ T2538] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:24 executing program 1:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x1, &(0x7f0000000300)=@raw=[@exit], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:51:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xf00000000000000)

11:51:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608252805"], 0x398}}, 0x0)

11:51:24 executing program 3:
syz_clone(0x20000, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0)

11:51:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x34}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3168.057578][ T1208] ieee802154 phy0 wpan0: encryption failed: -22
[ 3168.064411][ T1208] ieee802154 phy1 wpan1: encryption failed: -22
11:51:25 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x16}, {0x7}, {0x2}, {0x6}]})

[ 3168.108661][ T2553] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:25 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x4b40, 0x0)

11:51:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x1c00000000000000)

[ 3168.313119][   T26] audit: type=1326 audit(1691841085.403:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2556 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdecc47cae9 code=0x0
11:51:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608482805"], 0x398}}, 0x0)

11:51:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x44}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:25 executing program 3:
syz_clone(0x8000000, &(0x7f0000000280)="d43ddc46eec5446126ca37ebf477b268fc24878ac97356cbc9c403dfcde86f7b7e4405495c16d8d20836c9c4dce26fa981762462ae5fa48cdf730231ed79f8ec3f7011a395f8a9ddfed391d2d8fc7b3f7396ce7865bc6105e6e9d0e4e66e2cb98c6aaf5848742f3ff0f5c327fc71685cb04a8505727202316578a442f9e7d6912a4bc31d49d33db8fb881a73e4ab", 0x8e, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="509deed63308419409e7e5cf623da3fd297e211e5ff6e3c06a15d2a7ab8ba911fd8c44dcc9bf7f5cd88c95278b8dac7416aa840acd94139eadeda9ba3f6f5aa80283facde78e86e9aee8ab0e2a1604cb77a14008fee3b4b4386bd17a34a4484c361787e1cbc8b9d5f16a3cdb165bac527d95603ec812c9da3637c7477bca06a49a200d387d47eac37d5eb05184c4551324")
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$packet(0x11, 0x3, 0x300)

11:51:25 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x5}]})

11:51:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x3000000000000000)

11:51:25 executing program 5:
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe)

[ 3168.741836][ T2565] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26084c2805"], 0x398}}, 0x0)

11:51:26 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDGKBENT(r0, 0x4b4b, &(0x7f0000000040)={0xa1})

11:51:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0x18}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3169.239088][ T2582] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:26 executing program 5:
prctl$PR_SET_MM(0x2f, 0x4, &(0x7f0000ffd000/0x3000)=nil)

11:51:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x6000000000000000)

11:51:26 executing program 3:
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='+.\'^@]\'/\x00', 0xfffffffffffffffe)

11:51:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608602805"], 0x398}}, 0x0)

11:51:26 executing program 1:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x800da, &(0x7f0000000080)="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"})

11:51:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0x44}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:26 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x5421, &(0x7f0000000c80)={'wg0\x00', <r0=>0x0})
socket$packet(0x11, 0x0, 0x300)
socket$packet(0x11, 0x0, 0x300)
r1 = syz_open_dev$vcsu(&(0x7f0000001040), 0x0, 0x0)
syz_open_dev$vcsu(0x0, 0x9, 0x8200)
setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x398, 0xffffffff, 0xffffffff, 0x398, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x0, 0x80, 0x9, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x31, 0x47, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x1, 0x10000, 0x0, 0xffffffffffffffff, 0x6, '\x00', r0, r1, 0x2, 0x5}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)

[ 3169.848811][ T2595] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x30, r1, 0x201, 0x0, 0x0, {{}, {0x0, 0x2}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}}, 0x0)

11:51:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xc423000000000000)

11:51:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608682805"], 0x398}}, 0x0)

11:51:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x68, r1, 0x201, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='eth\x00'}}}}, 0x68}}, 0x0)

[ 3170.401517][ T2607] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:27 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="6a7e9002be4047a9fc4d2f1117312c1e", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)='h', 0x1}, {&(0x7f00000001c0)="dcc43f6bb1ffb5491c9de9f3b5771d2ee91849a0ac731bbf1d92c6743aa05363e8df3e3da74cee3530b547259e2879bf", 0x30}], 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000003c0)=""/54, 0x36}], 0x1}}], 0x2, 0x0, 0x0)

11:51:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26086c2805"], 0x398}}, 0x0)

11:51:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xf0ffffff00000000)

11:51:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3170.912969][ T2620] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608742805"], 0x398}}, 0x0)

11:51:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xffffff7f00000000)

[ 3171.508786][ T2628] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:28 executing program 5:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x23})

11:51:28 executing program 3:
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x403, 0x0)

11:51:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26087a2805"], 0x398}}, 0x0)

11:51:28 executing program 1:
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0)
bind$netlink(r0, 0x0, 0x0)

11:51:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xffffffff00000000)

11:51:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:29 executing program 5:
msgctl$IPC_RMID(0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000000380), 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff)
syz_io_uring_setup(0x699c, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x357}, &(0x7f00000007c0), &(0x7f0000000800))
socketpair(0x2a, 0x0, 0x3f, &(0x7f0000001340))
syz_genetlink_get_family_id$fou(&(0x7f0000001300), 0xffffffffffffffff)

11:51:29 executing program 1:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x12, &(0x7f0000000680)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:51:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608e82805"], 0x398}}, 0x0)

11:51:29 executing program 3:
msgctl$IPC_RMID(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)

11:51:29 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0xffffffffff600000)

11:51:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3172.669523][ T2654] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:29 executing program 1:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'tunl0\x00'}}, 0x1e)

11:51:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b26080ec005"], 0x398}}, 0x0)

11:51:30 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1c}, 0x48)

11:51:30 executing program 3:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, 0x0, 0x0)

11:51:30 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000003f40)={0x8}, 0x4)

[ 3173.174443][ T2666] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

11:51:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002802"], 0x398}}, 0x0)

11:51:30 executing program 5:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f00000000c0))

11:51:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="6a7e9002be4047a9fc4d2f1117312c1e", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='h', 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/130, 0x82}], 0x1}}], 0x1, 0x140, 0x0)

11:51:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002803"], 0x398}}, 0x0)

11:51:31 executing program 3:
syz_io_uring_setup(0x1473, &(0x7f00000003c0)={0x0, 0x0, 0x800}, &(0x7f0000000440), &(0x7f0000000480))
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

11:51:31 executing program 5:
bpf$PROG_LOAD(0x21, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:51:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002804"], 0x398}}, 0x0)

11:51:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

11:51:31 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="6a7e9002be4047a9fc4d2f1117312c1e", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}], 0x1, 0x8000)
recvmmsg(r1, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000700)=""/106, 0x6a}], 0x1}}], 0x1, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000001c40)={'#! ', './file0', [], 0xa, "f5db76c511603245a735c38e87"}, 0x18)

11:51:32 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
mq_open(0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x699c, &(0x7f0000000740)={0x0, 0x2688, 0x40, 0x0, 0x357}, &(0x7f00000007c0), &(0x7f0000000800))
socketpair(0x2a, 0x0, 0x3f, &(0x7f0000001340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$fou(0x0, r0)

11:51:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002806"], 0x398}}, 0x0)

11:51:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) (async)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

11:51:32 executing program 1:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0)

11:51:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:33 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x2f}, 0x6}}}, 0x7)

11:51:33 executing program 5:
r0 = socket$isdn_base(0x22, 0x3, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x1, &(0x7f0000000000)={0x0, 0x2710}, 0x10)

11:51:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002810"], 0x398}}, 0x0)

11:51:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

11:51:33 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x54, r0, 0x0, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x36}, {}, {0x48, 0x1}, {0x6c}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0x0, 0x1}, {0x24}, {0x13}, {0x36, 0x1}, {0x48}, {0x48, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0xc}, {0x30, 0x1}]}]}, 0x54}}, 0x0)

11:51:33 executing program 5:
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2, 0xfffffffe}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
r2 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000001040)={0x7, 'bond_slave_1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='G\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf2502000000060006000000000008000500ffffffff080002000100000006000600010000000800080003000000060006000200000008000100", @ANYRES32=r4, @ANYBLOB="08000500ffffffff0800020000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x200080c0)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x1, 0x20, 0x8, @vifc_lcl_ifindex=r4, @rand_addr=0x64010101}, 0x10)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x4008004)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000100)

11:51:33 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x45}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002802"], 0x398}}, 0x0)

11:51:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

[ 3176.753693][ T5011] Bluetooth: hci3: unexpected event 0x31 length: 13 > 6
[ 3177.093596][ T2757] pimreg: left allmulticast mode
11:51:34 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x54, r0, 0x0, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x36}, {}, {0x48, 0x1}, {0x6c}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0x0, 0x1}, {0x24}, {0x13}, {0x36, 0x1}, {0x48}, {0x48, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0xc}, {0x30, 0x1}]}]}, 0x54}}, 0x0)

11:51:34 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x2f}, 0x6}}}, 0x7)

11:51:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002899"], 0x398}}, 0x0)

11:51:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

11:51:34 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x48}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0)

11:51:34 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x54, r0, 0x0, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x36}, {}, {0x48, 0x1}, {0x6c}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0x0, 0x1}, {0x24}, {0x13}, {0x36, 0x1}, {0x48}, {0x48, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0xc}, {0x30, 0x1}]}]}, 0x54}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x54, r0, 0x0, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x4c}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x7}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x15, 0x24, [{0x36}, {}, {0x48, 0x1}, {0x6c}, {0x0, 0x1}, {0x1, 0x1}, {0x16}, {0x0, 0x1}, {0x24}, {0x13}, {0x36, 0x1}, {0x48}, {0x48, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0xc}, {0x30, 0x1}]}]}, 0x54}}, 0x0) (async)

11:51:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x10}}, 0x0)

[ 3177.307472][ T5011] Bluetooth: hci3: unexpected event 0x31 length: 13 > 6
11:51:35 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x29, 0x2f, 0x0, 0x0)

11:51:35 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

11:51:35 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x2f}, 0x6}}}, 0x7)

11:51:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'nicvf0\x00', {}, 0x3})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)="3113054f8c4f554c9c6ef221675e8bb9d002059bf6a1d58327e06b479777af6794d2723ca28844ab2a5d97a95a84163ee9f8d2e1c7767703a1dfdbe591b267ad5e936598f1b6c3cab572f9d5222dfea3370d20ff7fc9e8097d33bd3a826420f3c82c4d161639806f796a5df4532d0f5e0d37929f14eadbffce9f04e9883afe7c416b8ad0fd8ac529ce5c56f9d217933b7edd30cec7bb")

11:51:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5c}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x14}}, 0x0)

[ 3177.849513][ T5011] Bluetooth: hci3: unexpected event 0x31 length: 13 > 6
11:51:35 executing program 5:
r0 = socket(0x15, 0x5, 0x0)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

11:51:35 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

11:51:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x60}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x6c0}}, 0x0)

11:51:36 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x2f}, 0x6}}}, 0x7)

11:51:36 executing program 5:
bpf$OBJ_GET_PROG(0xd, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)

11:51:36 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

11:51:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x300}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3178.497636][ T5011] Bluetooth: hci3: unexpected event 0x31 length: 13 > 6
[ 3179.267504][ T2804] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 32)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'nicvf0\x00', {}, 0x3})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) (async, rerun: 32)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)="3113054f8c4f554c9c6ef221675e8bb9d002059bf6a1d58327e06b479777af6794d2723ca28844ab2a5d97a95a84163ee9f8d2e1c7767703a1dfdbe591b267ad5e936598f1b6c3cab572f9d5222dfea3370d20ff7fc9e8097d33bd3a826420f3c82c4d161639806f796a5df4532d0f5e0d37929f14eadbffce9f04e9883afe7c416b8ad0fd8ac529ce5c56f9d217933b7edd30cec7bb") (rerun: 32)

11:51:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0xec1}}, 0x0)

11:51:36 executing program 5:
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x200040}, 0x18)

11:51:36 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

11:51:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x500}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:36 executing program 3:

[ 3179.945266][ T2819] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:37 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000000), 0x4)

11:51:37 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC], 0x10)

11:51:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x33fe0}}, 0x0)

11:51:37 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x600}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:37 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$MON_IOCX_GETX(r2, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000100)={0x1, 'nicvf0\x00', {}, 0x3}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf250a00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fd, &(0x7f0000000040)="3113054f8c4f554c9c6ef221675e8bb9d002059bf6a1d58327e06b479777af6794d2723ca28844ab2a5d97a95a84163ee9f8d2e1c7767703a1dfdbe591b267ad5e936598f1b6c3cab572f9d5222dfea3370d20ff7fc9e8097d33bd3a826420f3c82c4d161639806f796a5df4532d0f5e0d37929f14eadbffce9f04e9883afe7c416b8ad0fd8ac529ce5c56f9d217933b7edd30cec7bb")

[ 3180.532674][ T2832] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:37 executing program 5:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000008c0)=@gcm_128={{}, "1f5d844b24813edf", "9a46a8434de120c08b11ae2420051260", "c2ca81ba", "b68c46d7b779129c"}, 0x28)

11:51:37 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC], 0x10)

11:51:37 executing program 3:

11:51:37 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0xfffffdef}}, 0x0)

11:51:38 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC], 0x10)

11:51:38 executing program 5:
r0 = socket(0x28, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0)

11:51:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x700}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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")
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:51:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x2}, 0x0)

11:51:38 executing program 3:

11:51:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

11:51:38 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2286, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:51:38 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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")
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:51:38 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x900}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3181.803874][ T2856] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x3}, 0x0)

11:51:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

11:51:39 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2287, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:51:39 executing program 3:
syz_emit_vhci(0x0, 0x0)

11:51:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf00}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:39 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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")
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async)

[ 3181.887410][ T5011] Bluetooth: hci3: SCO packet for unknown connection handle 2097
11:51:39 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESDEC], 0x10)

11:51:39 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x5}, 0x0)

11:51:39 executing program 5:
bpf$MAP_CREATE(0x10, &(0x7f0000000580)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

11:51:39 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x26a9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3182.368640][ T5011] Bluetooth: hci3: SCO packet for unknown connection handle 2097
11:51:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(0x0, 0x10)

[ 3182.914997][ T5011] Bluetooth: hci3: SCO packet for unknown connection handle 2097
[ 3183.006492][ T2885] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:40 executing program 5:
openat$vcs(0xffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDGETLED(r0, 0x4b31, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000001c80))
socketpair(0x28, 0x0, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)

11:51:40 executing program 3:
syz_emit_vhci(0x0, 0x0)

11:51:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfa0f, 0x1d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0xe084}, 0x8004)
r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$MON_IOCX_GETX(r8, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r10, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x45c}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x60c}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xcf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x3d}}}}}, 0x28}}, 0x815)

11:51:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4500}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x8}, 0x0)

11:51:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(0x0, 0x10)

11:51:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4800}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3183.852138][ T2907] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:41 executing program 3:
syz_emit_vhci(0x0, 0x0)

11:51:41 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(0x0, 0x10)

11:51:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x9}, 0x0)

11:51:41 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x0, 0x0, 0x0, 0x1000}, 0x48)

11:51:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5c00}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfa0f, 0x1d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0xe084}, 0x8004)
r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$MON_IOCX_GETX(r8, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r10, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x45c}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x60c}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xcf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x3d}}}}}, 0x28}}, 0x815)

[ 3184.564854][ T2916] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:41 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x10)

11:51:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x10}, 0x0)

11:51:41 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x890d, 0x0)

[ 3184.938353][ T5011] Bluetooth: hci3: Received unexpected HCI Event 0x00
11:51:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:42 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x10)

11:51:42 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{}, 0x6}}}, 0x7)

11:51:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfa0f, 0x1d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0xe084}, 0x8004) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfa0f, 0x1d}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0xe084}, 0x8004)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r7, 0x0, r7) (async)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$MON_IOCX_GETX(r8, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r10, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x45c}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x60c}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xcf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x3d}}}}}, 0x28}}, 0x815)

11:51:42 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000200))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000948000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

11:51:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x25}, 0x0)

[ 3185.473339][ T5011] Bluetooth: hci3: Received unexpected HCI Event 0x00
11:51:42 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x10)

11:51:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x60ff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3185.805459][ T2948] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x300}, 0x0)

[ 3186.005607][ T5011] Bluetooth: hci3: Received unexpected HCI Event 0x00
11:51:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xa926}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:43 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED}}, 0x7)

11:51:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x2, 0x1}, {0x0, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x24}, {0x30}, {0xb}, {0x3}, {0x9, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0x48}, {0x4, 0x1}, {0x24}, {0x18}, {0x36}, {0x29, 0x1}, {0x4, 0x1}, {0x3e}, {0x3}, {0x6b, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x80)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd2a, 0xfffffff9, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x448c0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x40008c0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

11:51:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x10)

[ 3186.432233][ T2959] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x7ffffff2}, 0x0)

11:51:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x30000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:43 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4}, {}, {}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000140)=""/186, 0x4c, 0xba, 0x1}, 0x20)

11:51:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x10)

11:51:44 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED}}, 0x7)

11:51:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x34000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x7ffffff8}, 0x0)

11:51:44 executing program 5:
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2})
gettid()
r1 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_route_sched(r1, &(0x7f0000000c40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x8088}, 0x20000040)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000670000/0x3000)=nil, 0x3000}, 0x1})
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000004c0)={{'\x00', 0x2}, {0x800}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2, 0x90, {0x0, 0xc, 0x0, "", 0x83, "5c7484415107a9df1cddebcff142b7b9144f0e06c5428dfee4b385e28bdc7e953258cc8d6084212813750cc1deb331fe5d0d21d607fbd2a6b5ee5d349d1d862326b9c1e27640192f7cafd9878b7cdb46251485a68dc414715723ae2f820d2f0b13c90a278f265ce2051ae13daebaa51dde76fd63a894f28de020165c0b1bf816e47190"}}, 0x9c})

11:51:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC], 0x10)

11:51:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x2, 0x1}, {0x0, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x24}, {0x30}, {0xb}, {0x3}, {0x9, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0x48}, {0x4, 0x1}, {0x24}, {0x18}, {0x36}, {0x29, 0x1}, {0x4, 0x1}, {0x3e}, {0x3}, {0x6b, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x80)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd2a, 0xfffffff9, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x448c0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x40008c0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

11:51:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x400300}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x7ffffff9}, 0x0)

11:51:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC], 0x10)

11:51:45 executing program 3:
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED}}, 0x7)

11:51:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x1000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:45 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x2, 0x1}, {0x0, 0x1}, {0x30, 0x1}, {0x1, 0x1}, {0x24}, {0x30}, {0xb}, {0x3}, {0x9, 0x1}, {0x18, 0x1}, {0x6c, 0x1}, {0x48}, {0x4, 0x1}, {0x24}, {0x18}, {0x36}, {0x29, 0x1}, {0x4, 0x1}, {0x3e}, {0x3}, {0x6b, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x80) (async)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r1, 0x100, 0x70bd2a, 0xfffffff9, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000041}, 0x448c0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x40008c0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

11:51:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0xfffffffd}, 0x0)

11:51:45 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC], 0x10)

11:51:45 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, &(0x7f0000000240)="34006ab92c11d87ac3df5080ddb39af0e35fe146047cb9b60a9ed192540b5e90a80d69e53f6177f7bb9aafc3e2215968365fd6b6c629aef73f1c923207e9d647290979a217d4fe8687edffdf92a5bca3a8b5d09f4cce6506a3c9ec2f25ed1562fc58f5eac9415b1f118a2c2413eef2f535580ccc7e9e2c0f23a0c4627051fcbb3c3c62b14d73eed306665a002dc558092a1248c057837de539f0ec88de7254e3ba9123c381cfd3e9cfcd0860f364f858a3b872ed4a60942fb905e143e391ea7b36e129357445626732d0a7795633f86e0ff1f2b157b1", 0xd6, 0x0, &(0x7f0000000340)={0xa, 0x4e24, 0x0, @empty}, 0x1c)

11:51:45 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x17}}, 0x14}}, 0x0)

11:51:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x2000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x2}, 0x0)

11:51:45 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRESDEC], 0x10)

11:51:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2000000, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:51:46 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000140)=""/186, 0x34, 0xba, 0x1}, 0x20)

[ 3189.174076][ T3023] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x3}, 0x0)

11:51:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xb}, @void}}}, 0x1c}}, 0x0)

11:51:46 executing program 1:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00007b1000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='f|\xc2$c\xf9\x9a\xf1\xddJ$\x16\xde\x96\x02\"\x8e\x94_\x153C[\xbdu\xf6\xd4H\x9d\xad<\x10\xbd\xda\x00H\xd2tY\x8cYO\xeey\xa9gs\x94\xc5@\x85s\xa3E\x7f/\x0e\xf5\xec\xe0')
process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f00008f9f09)=""/239, 0xef}], 0x1, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f000036d000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f00002ab000/0x3000)=nil)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x14)

11:51:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x4, 0x117}]}, 0x20}}, 0x0)

[ 3189.694718][ T3037] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3189.802629][ T5011] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 3189.811574][ T5011] Bluetooth: hci1: Injecting HCI hardware error event
[ 3189.819687][ T5011] Bluetooth: hci1: hardware error 0x00
11:51:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x4000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:47 executing program 5:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48)

11:51:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x4}, 0x0)

11:51:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x7fffefe4, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x3}, @void}}}, 0x1c}, 0x25}, 0x0)

11:51:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003080)=ANY=[@ANYBLOB="d42e0000", @ANYRES16=r1, @ANYBLOB="010000000000000010008300000008000300d520b2b76801148ad187154f4b0ba2c7e958887b4771a2d723942d0b41f22a2b82fbe14032d6751537be589fa47dc011e67b2e6339b22d7623a2f38c333d5ee4ef63b674856290c10afb4d644760046aa0fa47e1eb41b03819f747909ff79df1ce0e0e8b13423bc16199465871729d36d22ddd499c40bf564537d0242e52fbc94bf0", @ANYRES32=0x0, @ANYBLOB="ec040580100000800a0001000802110000010000d8040080540002800800a100e900000008009f0000000000050019010c000000080022014c0000000800a1008300000008002201f6020000050019010500000008002201af03000008002700010000000800a1007094ffff08020380040002004c00018048000180050005000800000004000800040001000500070008000000050003001f000000050006001400000004000c0008000200020000000600040005000000050005000f000000b40101801c000180060004000700000004000800050005000000000004000c003c0001800600040002"], 0x2ed4}}, 0x0)

11:51:47 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r4, 0x0, r4) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2000000, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2000000, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:51:47 executing program 5:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x240c83, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

[ 3190.365198][ T3049] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:47 executing program 1:
syz_usb_connect(0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ff18e008e604060005020102030109022f0001000000000904"], 0x0)

11:51:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x5}, 0x0)

11:51:48 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x0, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1034201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newaddr={0x40, 0x14, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x1f, 0xd9, 0xff, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8, 0x8, 0x622}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x4a}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
write$binfmt_script(r1, &(0x7f0000003a80)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x7ffff000}], 0x1, 0x2100, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x240482, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='rtc_irq_set_state\x00'}, 0x10)
getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)=""/245, &(0x7f00000000c0)=0xf5)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@delchain={0x78, 0x65, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0x2}, {0xffe0, 0xffff}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1f}}, @filter_kind_options=@f_route={{0xa}, {0x28, 0x2, [@TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x40000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xf}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004050}, 0x4)

11:51:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

11:51:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2000000, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:51:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x6000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3191.018277][ T3066] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x6}, 0x0)

[ 3191.212082][T23402] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 3191.453055][T23402] usb 2-1: Using ep0 maxpacket: 8
11:51:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRES32], 0x1c}}, 0x0)

11:51:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3191.569361][ T3080] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3191.584041][T23402] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
11:51:48 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x0, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1034201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newaddr={0x40, 0x14, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x1f, 0xd9, 0xff, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8, 0x8, 0x622}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x4a}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
write$binfmt_script(r1, &(0x7f0000003a80)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x7ffff000}], 0x1, 0x2100, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x240482, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='rtc_irq_set_state\x00'}, 0x10)
getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)=""/245, &(0x7f00000000c0)=0xf5)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@delchain={0x78, 0x65, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0x2}, {0xffe0, 0xffff}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1f}}, @filter_kind_options=@f_route={{0xa}, {0x28, 0x2, [@TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x40000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xf}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004050}, 0x4)

11:51:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x7}, 0x0)

11:51:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48805)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r8, @ANYBLOB="04c630ffdb999a5b53bcb961d1a19c0706619cf5e53a1ccf085ea9de453835520786b272d93d19972c4392fe13803139bdea5cb700916394ffc9a9e1eedc74435d61de874e5b4698336c548cfad06884350d1bbabf69013dc541a002873fdbd1d9f6a1399abc4b65dd78ba04aab0afa8b8f1ca1b4be3cc27afd2d837dff0085dd8d7b97b2d86d52f7a43c3db23d20d388d960dd6cefc7f79e42fb5766d67890a4176945bd50346d0cafe42e4b5a77e9a3c9186913eddb8e35e2601d674c7d1f31258cb"], 0x1c}}, 0x0)

[ 3191.752663][T23402] usb 2-1: New USB device found, idVendor=04e6, idProduct=0006, bcdDevice= 2.05
[ 3191.762357][T23402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3191.770652][T23402] usb 2-1: Product: syz
[ 3191.775432][T23402] usb 2-1: Manufacturer: syz
[ 3191.780285][T23402] usb 2-1: SerialNumber: syz
[ 3191.881534][ T5011] Bluetooth: hci1: Opcode 0x c03 failed: -110
[ 3192.005856][T23402] usb 2-1: config 0 descriptor??
[ 3192.054777][ T3086] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3192.060814][T23402] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 3192.175581][T23402] usb-storage 2-1:0.0: Quirks match for vid 04e6 pid 0006: 1
[ 3192.389589][T23402] usb 2-1: USB disconnect, device number 33
11:51:49 executing program 1:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r1)
ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))

11:51:49 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000000)={0x5c}, 0xfffffd62}}, 0x0)

11:51:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x8}, 0x0)

11:51:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:49 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48805) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r8, @ANYBLOB="04c630ffdb999a5b53bcb961d1a19c0706619cf5e53a1ccf085ea9de453835520786b272d93d19972c4392fe13803139bdea5cb700916394ffc9a9e1eedc74435d61de874e5b4698336c548cfad06884350d1bbabf69013dc541a002873fdbd1d9f6a1399abc4b65dd78ba04aab0afa8b8f1ca1b4be3cc27afd2d837dff0085dd8d7b97b2d86d52f7a43c3db23d20d388d960dd6cefc7f79e42fb5766d67890a4176945bd50346d0cafe42e4b5a77e9a3c9186913eddb8e35e2601d674c7d1f31258cb"], 0x1c}}, 0x0)

11:51:49 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x0, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1034201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newaddr={0x40, 0x14, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x1f, 0xd9, 0xff, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8, 0x8, 0x622}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x4a}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
write$binfmt_script(r1, &(0x7f0000003a80)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x7ffff000}], 0x1, 0x2100, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x240482, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='rtc_irq_set_state\x00'}, 0x10)
getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)=""/245, &(0x7f00000000c0)=0xf5)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@delchain={0x78, 0x65, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0x2}, {0xffe0, 0xffff}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1f}}, @filter_kind_options=@f_route={{0xa}, {0x28, 0x2, [@TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x40000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xf}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004050}, 0x4)

[ 3192.977814][ T3101] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:50 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x14}}, 0x14}}, 0x0)

11:51:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:50 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x9}, 0x0)

11:51:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48805)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r8, @ANYBLOB="04c630ffdb999a5b53bcb961d1a19c0706619cf5e53a1ccf085ea9de453835520786b272d93d19972c4392fe13803139bdea5cb700916394ffc9a9e1eedc74435d61de874e5b4698336c548cfad06884350d1bbabf69013dc541a002873fdbd1d9f6a1399abc4b65dd78ba04aab0afa8b8f1ca1b4be3cc27afd2d837dff0085dd8d7b97b2d86d52f7a43c3db23d20d388d960dd6cefc7f79e42fb5766d67890a4176945bd50346d0cafe42e4b5a77e9a3c9186913eddb8e35e2601d674c7d1f31258cb"], 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r8, @ANYBLOB="04c630ffdb999a5b53bcb961d1a19c0706619cf5e53a1ccf085ea9de453835520786b272d93d19972c4392fe13803139bdea5cb700916394ffc9a9e1eedc74435d61de874e5b4698336c548cfad06884350d1bbabf69013dc541a002873fdbd1d9f6a1399abc4b65dd78ba04aab0afa8b8f1ca1b4be3cc27afd2d837dff0085dd8d7b97b2d86d52f7a43c3db23d20d388d960dd6cefc7f79e42fb5766d67890a4176945bd50346d0cafe42e4b5a77e9a3c9186913eddb8e35e2601d674c7d1f31258cb"], 0x1c}}, 0x0)

[ 3193.512614][ T3119] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:50 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x0, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1034201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv4_newaddr={0x40, 0x14, 0x800, 0x70bd2d, 0x25dfdbff, {0x2, 0x1f, 0xd9, 0xff, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_FLAGS={0x8, 0x8, 0x622}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010101}, @IFA_FLAGS={0x8, 0x8, 0x4a}, @IFA_BROADCAST={0x8, 0x4, @multicast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x20000000)
write$binfmt_script(r1, &(0x7f0000003a80)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
preadv(r1, &(0x7f0000000140)=[{&(0x7f00000017c0)=""/4096, 0x7ffff000}], 0x1, 0x2100, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x240482, 0xa)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='rtc_irq_set_state\x00'}, 0x10)
getsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000180)=""/245, &(0x7f00000000c0)=0xf5)
sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@delchain={0x78, 0x65, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0x2}, {0xffe0, 0xffff}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80}}, @TCA_RATE={0x6, 0x5, {0x80, 0x1f}}, @filter_kind_options=@f_route={{0xa}, {0x28, 0x2, [@TCA_ROUTE4_POLICE={0x14, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x40000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xf}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004050}, 0x4)

11:51:50 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="8202", 0x2}], 0x1}}], 0x1, 0x4000c800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

11:51:51 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0)

11:51:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xa}, 0x0)

11:51:51 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff21, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20020000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000847aa9475289600a00000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4)

[ 3194.192634][ T3133] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:51 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x45000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:51 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff21, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20020000) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000847aa9475289600a00000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4)

11:51:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xb}, 0x0)

11:51:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="f00f0000", @ANYRES16=r1, @ANYBLOB="010001000000000000008700000008"], 0xff0}}, 0x0)

[ 3194.718724][ T3143] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x48000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xc}, 0x0)

11:51:52 executing program 3:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$AUDIT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x3c}, 0x3c}}, 0x0)

11:51:52 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="8202", 0x2}], 0x1}}], 0x1, 0x4000c800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

11:51:52 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32], 0x208e24b)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0x8188aea6, &(0x7f0000003680)={{0x0, 0x0, 0x80}})

11:51:52 executing program 4:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffff21, 0x7d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20020000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="010000847aa9475289600a00000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4)

[ 3195.302765][ T3154] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x84, 0x9, 0x0, 0x0)

11:51:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xd}, 0x0)

11:51:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x5c000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0d56dc714d3c538d4a380e6d8749bf8cd238dbbb289c20186933e73ad12fecd5fd530dd9af0b5269154bd7ae102dea14f1afde3813701f9da3d640330b19f3256811fdacab8652066b5f0d8db99b6d279ff00017ad5521727573e6e27ce4acd1c5b80c0239eea581851baa25807da40ba303c88bf3383d27c185fcb3404d23d0dc980c58", @ANYRES16=r1, @ANYBLOB="200028bd7000ffdbdf25150000000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000000000a001a00ffffffffffff00000a001a000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300116e74cae6071e56cc25a3c7091aef525d55998977956b6bfe959a585819", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', <r6=>0x0, 0x700, 0x8050, 0x5, 0x80000001, {{0x38, 0x4, 0x2, 0x38, 0xe0, 0x68, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x15, 0xffffffffffffffff, [{0x7, 0xf, "11f6d437489f986ad36f6a45dd"}]}, @cipso={0x86, 0x48, 0x3, [{0x5, 0xc, "2df8f66187bf4651f5cf"}, {0x0, 0x7, "b080abf94c"}, {0x5, 0xa, "1abd7a43d85dcd89"}, {0x6, 0x3, "bc"}, {0x5, 0x8, "51a1836f4358"}, {0x1, 0xd, "60172e104a14c155d38a83"}, {0x2, 0xd, "8eac4c098507092f3a445d"}]}, @timestamp_prespec={0x44, 0x54, 0x7b, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x20}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x147}, {@local, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8000}, {@multicast2, 0x1}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x8}, {@empty, 0x4}, {@private=0xa010101, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x2c, 0x0, 0x6, [0x81, 0x1aed, 0x7, 0x100]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r7=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r8=>0x0, 0x7c764b90ecbf5b17, 0x7, 0x401, 0x0, {{0x20, 0x4, 0x0, 0x29, 0x80, 0x67, 0x0, 0x40, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x7, 0x56, [@local]}, @rr={0x7, 0x7, 0xbf, [@private=0xa010101]}, @rr={0x7, 0xb, 0xbb, [@local, @loopback]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0xa, [{@multicast1, 0x5}, {@remote, 0xffffffff}]}, @generic={0x89, 0x2}, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0xa, [{@local, 0xc57e}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0xc877}, {@local, 0x6d}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4}]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0xec, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40804}, 0x20000001)

11:51:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x3, 0x0, 0x0)

11:51:52 executing program 1:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x0, r1, 0x0, 0x0})

[ 3195.823927][ T3168] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xe}, 0x0)

11:51:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x60000000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:53 executing program 3:
add_key$fscrypt_provisioning(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff)

[ 3196.390808][ T3182] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:53 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="8202", 0x2}], 0x1}}], 0x1, 0x4000c800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

11:51:53 executing program 1:
getpgid(0xffffffffffffffff)
syz_clone(0x4024000, 0x0, 0x0, 0x0, 0x0, 0x0)
getpid()
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
getpgid(0xffffffffffffffff)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="3b051faabad21d978a9e7f021ae8edb915fc9340160034561775d352c162e67b0c676ed66fae97f99106c05b02f12aceceefc0537fb26212af2d438ce8b3bd89e51d99e27d3c66622c9e391ffc98b7dccfed97f1039f03bc0b193d8cceef50d4993fd4b5a53f935c9cc3d9a537552cf254e649f31f667d441062845cbb4edf00c23846f1")

11:51:53 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0d56dc714d3c538d4a380e6d8749bf8cd238dbbb289c20186933e73ad12fecd5fd530dd9af0b5269154bd7ae102dea14f1afde3813701f9da3d640330b19f3256811fdacab8652066b5f0d8db99b6d279ff00017ad5521727573e6e27ce4acd1c5b80c0239eea581851baa25807da40ba303c88bf3383d27c185fcb3404d23d0dc980c58", @ANYRES16=r1, @ANYBLOB="200028bd7000ffdbdf25150000000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000000000a001a00ffffffffffff00000a001a000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300116e74cae6071e56cc25a3c7091aef525d55998977956b6bfe959a585819", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', <r6=>0x0, 0x700, 0x8050, 0x5, 0x80000001, {{0x38, 0x4, 0x2, 0x38, 0xe0, 0x68, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x15, 0xffffffffffffffff, [{0x7, 0xf, "11f6d437489f986ad36f6a45dd"}]}, @cipso={0x86, 0x48, 0x3, [{0x5, 0xc, "2df8f66187bf4651f5cf"}, {0x0, 0x7, "b080abf94c"}, {0x5, 0xa, "1abd7a43d85dcd89"}, {0x6, 0x3, "bc"}, {0x5, 0x8, "51a1836f4358"}, {0x1, 0xd, "60172e104a14c155d38a83"}, {0x2, 0xd, "8eac4c098507092f3a445d"}]}, @timestamp_prespec={0x44, 0x54, 0x7b, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x20}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x147}, {@local, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8000}, {@multicast2, 0x1}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x8}, {@empty, 0x4}, {@private=0xa010101, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x2c, 0x0, 0x6, [0x81, 0x1aed, 0x7, 0x100]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r8=>0x0, 0x7c764b90ecbf5b17, 0x7, 0x401, 0x0, {{0x20, 0x4, 0x0, 0x29, 0x80, 0x67, 0x0, 0x40, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x7, 0x56, [@local]}, @rr={0x7, 0x7, 0xbf, [@private=0xa010101]}, @rr={0x7, 0xb, 0xbb, [@local, @loopback]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0xa, [{@multicast1, 0x5}, {@remote, 0xffffffff}]}, @generic={0x89, 0x2}, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0xa, [{@local, 0xc57e}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0xc877}, {@local, 0x6d}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4}]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0xec, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40804}, 0x20000001)

11:51:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xa9260000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xf}, 0x0)

11:51:53 executing program 3:
r0 = syz_io_uring_setup(0x7de3, &(0x7f0000001f00), &(0x7f0000001c00), &(0x7f0000001f80))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000004080)={&(0x7f0000006000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1)

[ 3196.876594][ T3193] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xf0ffffff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:54 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="0d56dc714d3c538d4a380e6d8749bf8cd238dbbb289c20186933e73ad12fecd5fd530dd9af0b5269154bd7ae102dea14f1afde3813701f9da3d640330b19f3256811fdacab8652066b5f0d8db99b6d279ff00017ad5521727573e6e27ce4acd1c5b80c0239eea581851baa25807da40ba303c88bf3383d27c185fcb3404d23d0dc980c58", @ANYRES16=r1, @ANYBLOB="200028bd7000ffdbdf25150000000a001a0008021100000000000a000600ffffffffffff00000a00060008021100000000000a001a00ffffffffffff00000a001a000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300116e74cae6071e56cc25a3c7091aef525d55998977956b6bfe959a585819", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000280)={'erspan0\x00', <r6=>0x0, 0x700, 0x8050, 0x5, 0x80000001, {{0x38, 0x4, 0x2, 0x38, 0xe0, 0x68, 0x0, 0x81, 0x4, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x15, 0xffffffffffffffff, [{0x7, 0xf, "11f6d437489f986ad36f6a45dd"}]}, @cipso={0x86, 0x48, 0x3, [{0x5, 0xc, "2df8f66187bf4651f5cf"}, {0x0, 0x7, "b080abf94c"}, {0x5, 0xa, "1abd7a43d85dcd89"}, {0x6, 0x3, "bc"}, {0x5, 0x8, "51a1836f4358"}, {0x1, 0xd, "60172e104a14c155d38a83"}, {0x2, 0xd, "8eac4c098507092f3a445d"}]}, @timestamp_prespec={0x44, 0x54, 0x7b, 0x3, 0xb, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x20}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x147}, {@local, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x8000}, {@multicast2, 0x1}, {@private=0xa010101}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x8}, {@empty, 0x4}, {@private=0xa010101, 0x5}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x2c, 0x0, 0x6, [0x81, 0x1aed, 0x7, 0x100]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r7=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'syztnl0\x00', <r8=>0x0, 0x7c764b90ecbf5b17, 0x7, 0x401, 0x0, {{0x20, 0x4, 0x0, 0x29, 0x80, 0x67, 0x0, 0x40, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x7, 0x56, [@local]}, @rr={0x7, 0x7, 0xbf, [@private=0xa010101]}, @rr={0x7, 0xb, 0xbb, [@local, @loopback]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0xa, [{@multicast1, 0x5}, {@remote, 0xffffffff}]}, @generic={0x89, 0x2}, @timestamp_addr={0x44, 0x3c, 0x53, 0x1, 0xa, [{@local, 0xc57e}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0xc877}, {@local, 0x6d}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x800}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x4}]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0xec, r5, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40804}, 0x20000001)

11:51:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x10}, 0x0)

11:51:54 executing program 3:
clock_gettime(0x0, &(0x7f0000000140)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x5}, 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x0)

[ 3197.393134][ T3209] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:54 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xff600000}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x11}, 0x0)

[ 3197.989611][ T3219] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:55 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="8202", 0x2}], 0x1}}], 0x1, 0x4000c800)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd)

11:51:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="f34f303f4da0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r1, 0xd09, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200c4854}, 0x4080)

11:51:55 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x8934, 0x0)

11:51:55 executing program 1:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
select(0x40, &(0x7f0000000100)={0x9}, 0x0, 0x0, 0x0)

11:51:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xffffff7f}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x12}, 0x0)

[ 3198.336998][ T3229] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:55 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x7, 0x0, 0x0)

11:51:55 executing program 3:
r0 = landlock_create_ruleset(&(0x7f0000005280)={0x100}, 0x8, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)

11:51:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffff0}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:55 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="f34f303f4da0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r1, 0xd09, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200c4854}, 0x4080)

11:51:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x25}, 0x0)

11:51:56 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0xa, @in6=@private2}}, 0xe8)

[ 3198.880922][ T3243] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xffffffff}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:56 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x1a, &(0x7f0000000000)={@dev}, 0x8)

11:51:56 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x1c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @random="f34f303f4da0"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r1, 0xd09, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200c4854}, 0x4080) (async)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r1, 0xd09, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x200c4854}, 0x4080)

11:51:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x48}, 0x0)

11:51:56 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0xa, 0x0, 0x0)

11:51:56 executing program 5:
r0 = io_uring_setup(0x3d85, &(0x7f0000000000))
mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r0, 0x8000000)

11:51:57 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x40049409, 0x0)

11:51:57 executing program 3:
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x0, 0x2}, 0x18)

11:51:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00500500000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r4, 0x0, r4)
fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8a7, 0x1000}, {0x7fff, 0x8000}]}, 0x14, 0x3)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1f}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1e2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

11:51:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x44, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x4c}, 0x0)

11:51:57 executing program 3:
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff}})

[ 3200.339096][ T3266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3200.374531][ T3268] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:57 executing program 1:
syz_open_dev$media(&(0x7f0000000140), 0x0, 0x0)
select(0x40, &(0x7f0000001740), &(0x7f0000001780)={0x8}, 0x0, &(0x7f0000001800)={0x77359400})

11:51:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x60}, 0x0)

11:51:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x44, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:57 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, 0xe8)

11:51:57 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040))

[ 3200.930407][ T3279] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:58 executing program 1:
r0 = landlock_create_ruleset(&(0x7f0000005280)={0x100}, 0x8, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000052c0)={0x100}, 0x0)

11:51:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x68}, 0x0)

11:51:58 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00500500000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r4, 0x0, r4)
fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8a7, 0x1000}, {0x7fff, 0x8000}]}, 0x14, 0x3)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1f}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1e2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00500500000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8a7, 0x1000}, {0x7fff, 0x8000}]}, 0x14, 0x3) (async)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1f}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1e2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async)

11:51:58 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68)

11:51:58 executing program 3:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000100)={0x8})

[ 3201.549220][ T3291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 3201.585581][ T3294] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:58 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [], 0xa, "30e1eba8ce5a9527fd2bc62397066abecbba1d2466b7a683aa8c7e"}, 0x26)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@mss, @timestamp, @mss, @window, @window, @window, @window, @sack_perm], 0x8)
sendto$inet(r0, &(0x7f0000000400)="e5e4d42d771794423c1c58", 0xb, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9)
sendto$inet(r0, &(0x7f00000003c0)='\n', 0x200003c1, 0x3f5, 0x0, 0x0)

11:51:58 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:58 executing program 3:
r0 = syz_io_uring_setup(0x28f7, &(0x7f0000000140)={0x0, 0x0, 0x40}, &(0x7f00000000c0), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xb, 0x0, 0x0)

11:51:58 executing program 5:
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
syz_emit_vhci(0x0, 0x11)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x40}}, 0x0)

11:51:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x6c}, 0x0)

11:51:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00500500000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x8a7, 0x1000}, {0x7fff, 0x8000}]}, 0x14, 0x3) (async)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1f}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x1e2a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

[ 3202.148105][ T3307] sch_fq: defrate 0 ignored.
11:51:59 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:51:59 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3d0, 0x1f8, 0x110, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @broadcast, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420)

11:51:59 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x32, &(0x7f0000000000)={@dev}, 0x8)

11:51:59 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x33, &(0x7f0000000000)={@dev}, 0x8)

[ 3202.398349][ T3311] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:51:59 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x74}, 0x0)

[ 3202.636974][ T3319] x_tables: duplicate underflow at hook 1
11:51:59 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080091}, 0x4000004)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

11:51:59 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, 0xe8)

11:52:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x9}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:00 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x84, 0x23, 0x0, 0x0)

[ 3202.953020][ T3325] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:00 executing program 5:
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x10000000)

11:52:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x7a}, 0x0)

11:52:00 executing program 3:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), 0xffffffffffffffff)

11:52:00 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080091}, 0x4000004) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

11:52:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0xa}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:00 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x21, 0x0, 0x0)

[ 3203.559048][ T3338] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:00 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x3a)

11:52:01 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x80108906, 0x0)

11:52:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xe8}, 0x0)

11:52:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0xb}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x3b}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "197ea7782f04b01a60750196517cd761c28f0beb4bf21cbf"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg1\x00'}]}, 0x5c}}, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xaa0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20080091}, 0x4000004)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0)

11:52:01 executing program 5:
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0)
read$usbmon(r0, &(0x7f0000000280)=""/169, 0xfffffffffffffea5)

11:52:01 executing program 1:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'})

11:52:01 executing program 3:
r0 = syz_io_uring_setup(0x28f7, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0xa97, 0x0, 0x0, 0x0, 0x0)

[ 3204.314958][ T3354] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x10}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x300}, 0x0)

11:52:01 executing program 1:
r0 = syz_io_uring_setup(0x28f7, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000600)}], 0x3)

11:52:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x34a4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffc8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:52:01 executing program 5:
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x2, 0x2}}}}, 0xf)

[ 3204.879242][ T3369] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:02 executing program 3:
r0 = syz_io_uring_setup(0x28f7, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0x18, 0x0, 0x0)

11:52:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x11}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x384}, 0x0)

11:52:02 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x8953, &(0x7f00000002c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}})

11:52:02 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x84, 0x7, 0x0, 0x0)

[ 3205.400390][ T3383] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x13}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x398}, 0x0)

11:52:02 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x84, 0x19, 0x0, 0x0)

11:52:03 executing program 5:
pipe(&(0x7f0000000100))

[ 3205.936917][ T3393] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:03 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x89a1, &(0x7f00000002c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}})

11:52:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x34a4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffc8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x34a4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffc8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async)

11:52:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x34}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x3e7}, 0x0)

11:52:03 executing program 3:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000040)={@local, @dev, 0x0, "e507dcd152c5677d3e192f433f45e13a2106d2995ee64ba521826f6d49bab4e2"}, 0x3c)

11:52:03 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

11:52:03 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x0, 0x4, &(0x7f0000000000)={@dev}, 0x8)

11:52:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x44}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3206.503574][ T3404] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x500}, 0x0)

11:52:03 executing program 3:
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578960109029c8401000004000904000001c6cbe8000905870301"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

11:52:04 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @local}, {0x2, 0x0, @dev}, 0x104})

11:52:04 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x89a0, &(0x7f00000002c0)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @broadcast}})

[ 3207.067467][ T3420] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$MON_IOCX_GETX(r5, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x34a4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffc8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:52:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x44}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x600}, 0x0)

11:52:04 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_mreq(r0, 0x84, 0xd, 0x0, 0x0)

11:52:04 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90)

[ 3207.381475][ T8050] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3207.592211][ T3433] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3207.632065][ T8050] usb 4-1: Using ep0 maxpacket: 32
11:52:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000320", @ANYRES32=r3, @ANYBLOB="f7b3ddd980660c82ec9b36ab82008ef61d30e3724f3503cf45c3ea0f75e62af34e07fe2ebf13057df816f9b47175ff583b1fbba72ec2cc5d842ea97ce8589fd85768"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

11:52:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x700}, 0x0)

11:52:05 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="6a7e9002be4047a9fc4d2f1117312c1e", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)='h', 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/130, 0x82}], 0x1}}], 0x1, 0x140, 0x0)

11:52:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x48}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3208.628296][ T3447] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3208.906162][ T8050] usb 4-1: config index 0 descriptor too short (expected 33948, got 27)
[ 3208.915810][ T8050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 3209.102973][ T8050] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 3209.112615][ T8050] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=150
[ 3209.121588][ T8050] usb 4-1: Product: syz
[ 3209.126008][ T8050] usb 4-1: Manufacturer: syz
[ 3209.130876][ T8050] usb 4-1: SerialNumber: syz
[ 3209.224511][ T8050] usb 4-1: config 0 descriptor??
[ 3209.268228][ T8050] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 3209.293175][ T8050] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 3209.475904][ T8050] usb 4-1: USB disconnect, device number 11
[ 3209.503217][ T8050] ldusb 4-1:0.0: LD USB Device #0 now disconnected
11:52:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="a3d832"], 0x1c}}, 0x0)

11:52:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000320", @ANYRES32=r3, @ANYBLOB="f7b3ddd980660c82ec9b36ab82008ef61d30e3724f3503cf45c3ea0f75e62af34e07fe2ebf13057df816f9b47175ff583b1fbba72ec2cc5d842ea97ce8589fd85768"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

11:52:07 executing program 5:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6)

11:52:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x900}, 0x0)

11:52:07 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @dev}}}}, &(0x7f00000003c0)=0xb0)

[ 3210.232502][ T3455] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:07 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/186, 0x35, 0xba, 0x1}, 0x20)

11:52:07 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000320", @ANYRES32=r3, @ANYBLOB="f7b3ddd980660c82ec9b36ab82008ef61d30e3724f3503cf45c3ea0f75e62af34e07fe2ebf13057df816f9b47175ff583b1fbba72ec2cc5d842ea97ce8589fd85768"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

11:52:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xa00}, 0x0)

11:52:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xb00}, 0x0)

11:52:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x2}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0xe}, @void}}}, 0x1c}}, 0x0)

11:52:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

[ 3211.557984][ T3475] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000e00))

11:52:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xc00}, 0x0)

11:52:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100fcffffff0000000076"], 0x1c}}, 0x0)

11:52:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3212.056167][ T3486] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:10 executing program 1:
socketpair(0x1d, 0x0, 0x0, &(0x7f0000000480))

11:52:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:52:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x4}]}, 0x20}, 0x300}, 0x0)

11:52:10 executing program 5:
socketpair(0x1d, 0x0, 0x48000000, &(0x7f0000000480))

11:52:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xd00}, 0x0)

11:52:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x4}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3213.173710][ T3501] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:10 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), 0xffffffffffffffff)

11:52:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}}, 0x0)

11:52:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

11:52:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xe00}, 0x0)

11:52:10 executing program 5:
r0 = socket(0x11, 0x2, 0x0)
getsockopt$inet_mreqn(r0, 0x107, 0x0, 0x0, 0x0)

[ 3213.733233][ T3513] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3213.962424][ T3503] can: request_module (can-proto-0) failed.
11:52:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x24}}, 0x0)

11:52:11 executing program 3:
r0 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000080), 0x8)

11:52:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:52:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xec0}, 0x0)

11:52:11 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff)

[ 3214.313718][ T3523] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async)

11:52:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:11 executing program 3:
openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x125800, 0x0)

11:52:11 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8a}]}]}]}, 0x38}}, 0x0)

11:52:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xf00}, 0x0)

11:52:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f4, &(0x7f0000000200)={'sit0\x00', 0x0})

[ 3214.939108][ T3539] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

11:52:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

11:52:12 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8923, &(0x7f00000003c0)={'ip_vti0\x00', 0x0})

11:52:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x1100}, 0x0)

11:52:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x8}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:12 executing program 5:
madvise(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0)
mlock(&(0x7f0000ff8000/0x2000)=nil, 0x2000)
msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1)

[ 3215.377052][ T3548] @: renamed from ip_vti0 (while UP)
[ 3215.528284][ T3555] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r1, 0x6e98f93b24512ff5, 0x0, 0x0, {0x4}}, 0x14}}, 0x0)

11:52:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x9}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:12 executing program 1:
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x7, 0x4028a32, 0xffffffffffffffff, 0x10000000)

11:52:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x1200}, 0x0)

11:52:12 executing program 5:
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0x0, 0x4028a32, 0xffffffffffffffff, 0x10000000)

11:52:13 executing program 3:
r0 = socket(0x1d, 0x3, 0x1)
getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0)

[ 3216.130708][ T3568] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:13 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x8922, &(0x7f0000000200)={'sit0\x00', 0x0})

11:52:13 executing program 3:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000140)={0xa})

11:52:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x2500}, 0x0)

11:52:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xf}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0)

11:52:13 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

[ 3216.667006][ T3579] sit0: mtu less than device minimum
[ 3216.690249][ T3578] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:13 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48)

11:52:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x45}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:13 executing program 1:
r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = dup(r0)
mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x0)
renameat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', r0, &(0x7f00000011c0)='./file0\x00')

11:52:14 executing program 3:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/mdstat\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/152, 0x98}], 0x1, 0x4, 0x0)

11:52:14 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

11:52:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x2531}, 0x0)

11:52:14 executing program 5:
clock_settime(0x0, &(0x7f0000000980)={0x77359400})

11:52:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x48}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:14 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x15, 0x8, 0x2}, 0x48)

11:52:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}}, &(0x7f00000006c0)=""/193, 0x2a, 0xc1, 0x1}, 0x20)

[ 3217.417156][ T3594] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x30ea}, 0x0)

11:52:14 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

11:52:14 executing program 1:
r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)

11:52:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x5c}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:14 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x48}}, 0x0)

11:52:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', 0x0})

[ 3217.963698][ T3608] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x39c, 0x0, 0x100, 0x70bd2b, 0x4, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_WIN={0xffffffffffffff97, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7ea5c4e623362e32f81895c3780accbcac775357c1472b9dd02127"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "670b4e81c9574121f52d2a9220e114297a725bf037c34fa3"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "93e9a5905f80374c633681e7daa996e4b38811f56597f955a60936fe"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "2d4fffb4f75a72ef02d7e754e2cee18b8a51b11c5c07fb253f2eb84b435d9d079ab1e5d82c1fc73a254ad1beecfc747aa4056588f42dd77e9275ca372ecfc67b8f69a45bc72150af7fb895b1eaa6ecb67a7ab1883d6b215b7bd43a2c70ade321f5814d4d529d8480145b9ba84cad59c1ca3770a89740ba95ac2aa64a98231abe10017faf0fc66d6a"}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb70}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x742}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "95ca731db5fd6cfdb10371eb847472aa04cef1907c74810b7deae1c8a0ec8001e117feef4b32f97fa5853111885bc414ec7b9dfc6232a15ccd3e21ecbe0481f9cfaaa52b19213e468ec0a3f1e3914ff0ce5a7e1984e8d56e5e3f80dd9b7cfb7240a1d962c9d041162831b9d7d5763260e1f89ff7c90f64614c4733b8b5e4b6f9546a9445132401dc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x39c}, 0x1, 0x0, 0x0, 0x80000}, 0x20041000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00b9e0cbf69ff15313a07e58c60000", @ANYRES16=r4, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="b740a348a01bc35cca90c136ebc402592be0c67dd75f79d54d19121d182b1aff9633180ae91878129ba7e5cf3b22c43094b4251d5cc80ffa02e518f1736f3570244ddf3b80d1e7913fc74f83ad89d5051a252202fad9933d740700000000000000a9971238f3f9d3e932afa614be31b6872309a769ba873de58a1b9e2b0b794c73138fc693d669b8"], 0x1c}}, 0x0)

11:52:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r0)

11:52:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x3125}, 0x0)

11:52:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x60}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:15 executing program 5:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(0x0, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

11:52:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="a3d86b"], 0x1c}}, 0x0)

[ 3218.547318][ T3623] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3218.719740][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
11:52:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x300}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x4800}, 0x0)

11:52:16 executing program 3:
open(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)

11:52:16 executing program 5:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000200))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r0, 0x0)

11:52:16 executing program 1:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

[ 3219.387621][ T3637] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:16 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000003580)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @private2, 0x50a}, 0x1c, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0)

11:52:16 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0}) (async, rerun: 64)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 64)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x39c, 0x0, 0x100, 0x70bd2b, 0x4, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_WIN={0xffffffffffffff97, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7ea5c4e623362e32f81895c3780accbcac775357c1472b9dd02127"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "670b4e81c9574121f52d2a9220e114297a725bf037c34fa3"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "93e9a5905f80374c633681e7daa996e4b38811f56597f955a60936fe"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "2d4fffb4f75a72ef02d7e754e2cee18b8a51b11c5c07fb253f2eb84b435d9d079ab1e5d82c1fc73a254ad1beecfc747aa4056588f42dd77e9275ca372ecfc67b8f69a45bc72150af7fb895b1eaa6ecb67a7ab1883d6b215b7bd43a2c70ade321f5814d4d529d8480145b9ba84cad59c1ca3770a89740ba95ac2aa64a98231abe10017faf0fc66d6a"}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb70}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x742}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "95ca731db5fd6cfdb10371eb847472aa04cef1907c74810b7deae1c8a0ec8001e117feef4b32f97fa5853111885bc414ec7b9dfc6232a15ccd3e21ecbe0481f9cfaaa52b19213e468ec0a3f1e3914ff0ce5a7e1984e8d56e5e3f80dd9b7cfb7240a1d962c9d041162831b9d7d5763260e1f89ff7c90f64614c4733b8b5e4b6f9546a9445132401dc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x39c}, 0x1, 0x0, 0x0, 0x80000}, 0x20041000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00b9e0cbf69ff15313a07e58c60000", @ANYRES16=r4, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="b740a348a01bc35cca90c136ebc402592be0c67dd75f79d54d19121d182b1aff9633180ae91878129ba7e5cf3b22c43094b4251d5cc80ffa02e518f1736f3570244ddf3b80d1e7913fc74f83ad89d5051a252202fad9933d740700000000000000a9971238f3f9d3e932afa614be31b6872309a769ba873de58a1b9e2b0b794c73138fc693d669b8"], 0x1c}}, 0x0)

11:52:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x500}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x4c00}, 0x0)

11:52:17 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000340)={0x0, {}, 0x0, {}, 0xfffffff8, 0x12, 0x0, 0x0, "7c679fadd39ac98933b2e68369a7efd1dc8f45c196aeace643d059390a20f97bce7697f2665725d7638e0bdee51a05216b5c7f54789ce527fde8a6088b41c778", "38df431d5b19387409fa3b99e7e2d66fe95071461688a39c7c4c76d6188ff688"})
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000180))
socket$igmp6(0xa, 0x3, 0x2)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

11:52:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x600}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:17 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)

[ 3220.221815][ T3657] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 3220.300115][ T3661] loop0: detected capacity change from 0 to 8
11:52:17 executing program 5:
clock_adjtime(0x0, &(0x7f0000000000)={0x5})

11:52:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0}) (async)
r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$MON_IOCX_GETX(r4, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'}) (rerun: 32)
sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x39c, 0x0, 0x100, 0x70bd2b, 0x4, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PROP_WIN={0xffffffffffffff97, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "7ea5c4e623362e32f81895c3780accbcac775357c1472b9dd02127"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "670b4e81c9574121f52d2a9220e114297a725bf037c34fa3"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "93e9a5905f80374c633681e7daa996e4b38811f56597f955a60936fe"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "2d4fffb4f75a72ef02d7e754e2cee18b8a51b11c5c07fb253f2eb84b435d9d079ab1e5d82c1fc73a254ad1beecfc747aa4056588f42dd77e9275ca372ecfc67b8f69a45bc72150af7fb895b1eaa6ecb67a7ab1883d6b215b7bd43a2c70ade321f5814d4d529d8480145b9ba84cad59c1ca3770a89740ba95ac2aa64a98231abe10017faf0fc66d6a"}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb70}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x742}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "95ca731db5fd6cfdb10371eb847472aa04cef1907c74810b7deae1c8a0ec8001e117feef4b32f97fa5853111885bc414ec7b9dfc6232a15ccd3e21ecbe0481f9cfaaa52b19213e468ec0a3f1e3914ff0ce5a7e1984e8d56e5e3f80dd9b7cfb7240a1d962c9d041162831b9d7d5763260e1f89ff7c90f64614c4733b8b5e4b6f9546a9445132401dc"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x39c}, 0x1, 0x0, 0x0, 0x80000}, 0x20041000) (async, rerun: 64)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00b9e0cbf69ff15313a07e58c60000", @ANYRES16=r4, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="b740a348a01bc35cca90c136ebc402592be0c67dd75f79d54d19121d182b1aff9633180ae91878129ba7e5cf3b22c43094b4251d5cc80ffa02e518f1736f3570244ddf3b80d1e7913fc74f83ad89d5051a252202fad9933d740700000000000000a9971238f3f9d3e932afa614be31b6872309a769ba873de58a1b9e2b0b794c73138fc693d669b8"], 0x1c}}, 0x0) (rerun: 64)

11:52:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x6000}, 0x0)

11:52:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x700}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:17 executing program 3:
openat$cuse(0xffffffffffffff9c, &(0x7f0000004c00), 0x2, 0x0)

11:52:17 executing program 1:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x1c, 0x1c, 0x1}, 0x1c)

[ 3220.887336][ T3673] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:18 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x1262, 0xffffffffffffffff)

11:52:18 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x401870c8, 0xffffffffffffffff)

11:52:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x60ff}, 0x0)

11:52:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x64, 0x1}, 0x1c}}, 0x0)

11:52:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x900}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:18 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
linkat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)

11:52:18 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @dev}, @ax25={0x3, @bcast}, @nfc, 0x5})

[ 3221.522151][ T3689] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x0)

11:52:18 executing program 1:
syz_usb_connect$cdc_ncm(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x2, 0x1, 0x4, 0x0, 0xf1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@country_functional={0x6}, @dmm={0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x3d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, 0x0)

11:52:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xf00}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:18 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
linkat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)

11:52:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x6800}, 0x0)

11:52:19 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @dev}, @ax25={0x3, @bcast}, @nfc, 0x5})

[ 3222.140415][ T3705] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x26a9}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:19 executing program 4:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
linkat(r0, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)={0x1c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)

[ 3222.221412][T19108] usb 2-1: new high-speed USB device number 34 using dummy_hcd
11:52:19 executing program 3:
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @loopback}}, 0x24)

11:52:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x6c00}, 0x0)

11:52:19 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @dev}, @ax25={0x3, @bcast}, @nfc, 0x5})

[ 3222.462041][T19108] usb 2-1: Using ep0 maxpacket: 16
[ 3222.591761][T19108] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 61, changing to 9
[ 3222.606762][T19108] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 3222.619414][T19108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 3222.629611][T19108] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[ 3222.659831][ T3715] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x4500}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3222.892422][T19108] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3222.902652][T19108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3222.910950][T19108] usb 2-1: Product: syz
[ 3222.915535][T19108] usb 2-1: Manufacturer: syz
[ 3222.920404][T19108] usb 2-1: SerialNumber: syz
[ 3223.305590][T19108] cdc_ncm 2-1:1.0: bind() failure
[ 3223.324817][T19108] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 3223.335178][T19108] cdc_ncm 2-1:1.1: bind() failure
[ 3223.400598][T19108] usb 2-1: USB disconnect, device number 34
11:52:20 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x125d, 0xffffffffffffffff)

11:52:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0)

11:52:20 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @in={0x2, 0x0, @dev}, @ax25={0x3, @bcast}, @nfc, 0x5})

11:52:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x4800}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x7400}, 0x0)

11:52:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

[ 3223.894262][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 3223.959529][ T3735] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:21 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}, @FRA_FLOW={0x8, 0xb, 0xffffff31}]}, 0x2c}}, 0x0)

11:52:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x5c00}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:21 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x401870cc, 0xffffffffffffffff)

11:52:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x7a00}, 0x0)

11:52:21 executing program 3:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x1274, 0xffffffffffffffff)

11:52:21 executing program 1:
execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000540)=[&(0x7f0000000300)=').+-(&${-\x00', &(0x7f0000000340)='*\\(\\-\x00'], 0x400)

11:52:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r4=>r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2efaf5c196b5a3beb5f61f123e0fa5b07d802949"])
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r5, 0x0, r5)
fallocate(r5, 0x4, 0x9634, 0xe)
mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x5, 0x12112, r2, 0x9b710000)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042cbd7000fbdbdf25060000000c009900ff15ffff17006d6f1b660200"/41], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20000001)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080))
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES8, @ANYRES8=0x0, @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

[ 3224.575419][ T3749] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:21 executing program 3:
mknodat(0xffffffffffffffff, 0x0, 0x3000, 0x0)

11:52:21 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x40101288, 0xffffffffffffffff)

11:52:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x6000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x8403}, 0x0)

11:52:22 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100})

11:52:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x5, 0x11, 'vlan0\x00'}]}, 0x30}}, 0x0)

11:52:22 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x40081271, r0)

11:52:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x60ff}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

[ 3225.242297][ T3762] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x9803}, 0x0)

11:52:22 executing program 5:
mknodat$loop(0xffffffffffffff9c, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

11:52:22 executing program 3:
r0 = socket(0x1, 0x5, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001300))
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8901, &(0x7f0000000080))
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000))

[ 3225.897265][ T3773] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r4=>r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2efaf5c196b5a3beb5f61f123e0fa5b07d802949"])
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r5, 0x0, r5)
fallocate(r5, 0x4, 0x9634, 0xe) (async)
fallocate(r5, 0x4, 0x9634, 0xe)
mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x5, 0x12112, r2, 0x9b710000)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042cbd7000fbdbdf25060000000c009900ff15ffff17006d6f1b660200"/41], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20000001)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080))
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES8, @ANYRES8=0x0, @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xa926}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:23 executing program 5:
mlockall(0x5)
fchmodat(0xffffffffffffffff, 0x0, 0x0)

11:52:23 executing program 3:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r2}}, 0x38)

11:52:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xc00e}, 0x0)

11:52:23 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0)

11:52:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x30000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:23 executing program 5:
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "b4c05995b5d4d95c4f41e68e11afa3cfb7aeb6aab755dc1038bc33ea641464f0e614a0be07ed7a3b49dce607ade6adcf1e6dc16cbee3573c752872e9805f6623"}, 0x48, 0xfffffffffffffffb)

[ 3226.554342][ T3791] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r4=>r0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="2efaf5c196b5a3beb5f61f123e0fa5b07d802949"])
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r5, 0x0, r5) (async)
fallocate(r5, 0x4, 0x9634, 0xe) (async)
mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x5, 0x12112, r2, 0x9b710000) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042cbd7000fbdbdf25060000000c009900ff15ffff17006d6f1b660200"/41], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES8, @ANYRES8=0x0, @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:23 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000a80)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000001ec0), &(0x7f0000002f00)=0x8)
connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)

11:52:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xe703}, 0x0)

11:52:23 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

11:52:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x34000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:24 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x4b4a, &(0x7f0000000000))

[ 3227.133715][ T3807] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:24 executing program 3:
syz_genetlink_get_family_id$tipc2(&(0x7f0000005800), 0xffffffffffffffff)
syz_clone3(&(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

11:52:24 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r4, 0x0, r4)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff000, 0x61}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="59bd14b4a782fe07a69c000019b5f929e1953fd34b27a44c730401c79a84d8c328cba4203b88c44eeb443ffa200d7fb63a057cb6ccb077b816d8a811ccc4e494fdc769ae99f725ba70f1f274751e5871ef4b7a16f58325e7f0aeb0b7191d850700c58d0dcec3afb92245481f5fb1a9"], 0x1c}}, 0x0)

11:52:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xe800}, 0x0)

11:52:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x400300}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:24 executing program 5:
r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000440), 0x121042, 0x0)
write$damon_contexts(r0, &(0x7f0000000480)=[{' ', './file0'}], 0x1)

11:52:24 executing program 1:
pipe2(0x0, 0x0)
syz_clone3(&(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

[ 3227.736278][ T3818] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0xea30}, 0x0)

11:52:25 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

11:52:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket(0x10, 0x400000000080803, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
read$FUSE(r6, &(0x7f0000002ac0)={0x2020}, 0x2020)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}})
syz_clone3(&(0x7f0000004b40)={0x8100000, &(0x7f0000000340), &(0x7f0000000840), &(0x7f0000000880), {0x1d}, &(0x7f00000008c0)=""/182, 0xb6, &(0x7f0000000980)=""/52, &(0x7f0000004b00)=[0x0, 0x0], 0x4000000000000136, {r6}}, 0x58)
ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000040)={0xd6bb, 0x0, 0x4, 0x4c51000, 0x14, "25eb55e211930000ba00"})
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="39ca1999", @ANYRES16=r4, @ANYBLOB="080025bd7000fbdbdf25000000000800020000000000060006000100000008000700", @ANYRES32=r6, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r4, 0x200, 0x70bd2a, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x24002054)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$TCFLSH(r8, 0x5608, 0x1)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8810)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r4, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40000000)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="380030b0083d54244f714656653f765a00008988b0bc4aa9ea55bf48963e678b87440fa1fa939588bc3fce76218a29f842cdad041bdd3853d0d8d420d2e7e18cf872b43f7f731a709a43e585251bf980483fc6cddd585c17e6dd957747e23ef2edc12e6e76d0142f675837ff869164ad93f89250aef003214475e014dc48e51f948a70493a22391bf28eb648aeb850686fe6d0c9b6d3dd1db9e74d59c87b3cafb36d092c3b067c6b2860ac479cb8c938fb06f642b2298ccbdfe83aefb3281c72c070a30a868828b79c34111c0ac5f29356f04688c7d4db2f53345ebb03a5b86683efe5acc7e7f7c85047da025c61d82a5351602e08a8cc8f23eed1b26b657d484c34b1ec943d1a11a767711f3389db0677520f0dba26473461911a471461ec7d55d310d3faf1a6cfb1e8158f87a62668eba85672a2d8e928b7e97190", @ANYRES16=r4, @ANYBLOB="000829bd7000fddbdf250100000008000800000000000c0003000100000000000000080005000a01010208000700", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c041}, 0x20008000)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040050)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002bbd7000ffdbdf250100006508000900030000000800080001100000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004010)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/rmi4', 0x20002, 0x4)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x10400, 0x106)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, r4, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x4)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x40, r4, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x1)
r11 = dup(0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x0, 0x301, 0x0, 0x0, {0x12}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x244, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x277f}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x534}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xec}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x640}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c1}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5586}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf39}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfa4}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd73}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x8044}, 0x400c0)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x28}}, 0x0)

11:52:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x1000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:25 executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0xc0105500, 0x0)

[ 3228.348353][ T3831] bridge0: port 3(erspan0) entered blocking state
[ 3228.357698][ T3831] bridge0: port 3(erspan0) entered disabled state
[ 3228.365231][ T3831] erspan0: entered allmulticast mode
[ 3228.374121][ T3831] erspan0: entered promiscuous mode
[ 3228.382948][ T3831] bridge0: port 3(erspan0) entered blocking state
[ 3228.390095][ T3831] bridge0: port 3(erspan0) entered forwarding state
[ 3228.432308][ T3834] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x34000}, 0x0)

11:52:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0}) (async)
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff000, 0x61}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="59bd14b4a782fe07a69c000019b5f929e1953fd34b27a44c730401c79a84d8c328cba4203b88c44eeb443ffa200d7fb63a057cb6ccb077b816d8a811ccc4e494fdc769ae99f725ba70f1f274751e5871ef4b7a16f58325e7f0aeb0b7191d850700c58d0dcec3afb92245481f5fb1a9"], 0x1c}}, 0x0)

11:52:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x2000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:25 executing program 1:
r0 = syz_open_dev$media(&(0x7f0000000100), 0x0, 0x0)
ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0)

11:52:26 executing program 5:
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f00000008c0)="9c", 0xffffff1f)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

[ 3229.024644][ T3847] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:26 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

11:52:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x400300}, 0x0)

11:52:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
fcntl$dupfd(r4, 0x0, r4)
r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0})
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0})
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff000, 0x61}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="59bd14b4a782fe07a69c000019b5f929e1953fd34b27a44c730401c79a84d8c328cba4203b88c44eeb443ffa200d7fb63a057cb6ccb077b816d8a811ccc4e494fdc769ae99f725ba70f1f274751e5871ef4b7a16f58325e7f0aeb0b7191d850700c58d0dcec3afb92245481f5fb1a9"], 0x1c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r4, 0x0, r4) (async)
syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async)
ioctl$MON_IOCX_GETX(r5, 0x4018920a, &(0x7f0000000100)={0x0, 0x0}) (async)
fcntl$dupfd(r5, 0x0, r5) (async)
ioctl$MON_IOCX_GETX(r6, 0x80089203, &(0x7f00000004c0)={0x0, 0x0}) (async)
sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffff000, 0x61}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r4, @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r3, @ANYBLOB="59bd14b4a782fe07a69c000019b5f929e1953fd34b27a44c730401c79a84d8c328cba4203b88c44eeb443ffa200d7fb63a057cb6ccb077b816d8a811ccc4e494fdc769ae99f725ba70f1f274751e5871ef4b7a16f58325e7f0aeb0b7191d850700c58d0dcec3afb92245481f5fb1a9"], 0x1c}}, 0x0) (async)

11:52:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x3000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:26 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

[ 3229.495942][ T1208] ieee802154 phy0 wpan0: encryption failed: -22
[ 3229.502913][ T1208] ieee802154 phy1 wpan1: encryption failed: -22
11:52:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x4000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x1000000}, 0x0)

11:52:27 executing program 5:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x300}})

11:52:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000e00000a0000000800e62d", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:27 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

[ 3230.272998][ T3874] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x5000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x2000000}, 0x0)

11:52:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000e00000a0000000800e62d", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:27 executing program 5:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x6440, 0x0)

11:52:27 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

11:52:28 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

[ 3230.908334][ T3885] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x6000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:28 executing program 5:
r0 = socket$inet6(0x18, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000580), 0x10, 0x0, 0x0)

11:52:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000e00000a0000000800e62d", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0)

11:52:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x3000000}, 0x0)

11:52:28 executing program 5:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000))

[ 3231.660299][ T3907] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.0'.
11:52:28 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = dup(r0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvfrom(r3, &(0x7f0000000080)=""/166, 0x59007, 0x0, 0x0, 0x100000000000000)
sendfile(r3, r1, 0x0, 0x8a000)

11:52:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0x7000000}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x1}]}]}, 0x48}}, 0x0)

11:52:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="01b32a922b0b2608002805"], 0x398}, 0x1, 0x4000000}, 0x0)

[ 3231.999530][ T3897] =====================================================
[ 3232.007121][ T3897] BUG: KMSAN: uninit-value in af_alg_free_resources+0x3d1/0xf60
[ 3232.015273][ T3897]  af_alg_free_resources+0x3d1/0xf60
[ 3232.020818][ T3897]  skcipher_recvmsg+0x6a0/0x1a20
[ 3232.026200][ T3897]  __sys_recvfrom+0x505/0x810
[ 3232.031327][ T3897]  __x64_sys_recvfrom+0x126/0x1d0
[ 3232.038464][ T3897]  do_syscall_64+0x41/0xc0
[ 3232.044081][ T3897]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3232.050231][ T3897] 
[ 3232.052768][ T3897] Uninit was created at:
[ 3232.057297][ T3897]  slab_post_alloc_hook+0x12f/0xb70
[ 3232.062924][ T3897]  __kmem_cache_alloc_node+0x536/0x8d0
[ 3232.068615][ T3897]  __kmalloc+0x121/0x3c0
[ 3232.073209][ T3897]  sock_kmalloc+0x128/0x1c0
[ 3232.077919][ T3897]  af_alg_alloc_areq+0x41/0x2a0
[ 3232.083185][ T3897]  skcipher_recvmsg+0x514/0x1a20
[ 3232.088378][ T3897]  __sys_recvfrom+0x505/0x810
[ 3232.093548][ T3897]  __x64_sys_recvfrom+0x126/0x1d0
[ 3232.098797][ T3897]  do_syscall_64+0x41/0xc0
[ 3232.103568][ T3897]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3232.109711][ T3897] 
[ 3232.112283][ T3897] CPU: 1 PID: 3897 Comm: syz-executor.3 Not tainted 6.5.0-rc5-syzkaller-00296-gf8de32cc060b #0
[ 3232.122937][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 3232.133316][ T3897] =====================================================
[ 3232.142314][ T3897] Disabling lock debugging due to kernel taint
[ 3232.148781][ T3897] Kernel panic - not syncing: kmsan.panic set ...
[ 3232.155349][ T3897] CPU: 1 PID: 3897 Comm: syz-executor.3 Tainted: G    B              6.5.0-rc5-syzkaller-00296-gf8de32cc060b #0
[ 3232.167381][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 3232.177609][ T3897] Call Trace:
[ 3232.181014][ T3897]  <TASK>
[ 3232.184049][ T3897]  dump_stack_lvl+0x1bf/0x240
[ 3232.188951][ T3897]  dump_stack+0x1e/0x20
[ 3232.193293][ T3897]  panic+0x4d5/0xc70
[ 3232.197369][ T3897]  ? add_taint+0x108/0x1a0
[ 3232.202035][ T3897]  kmsan_report+0x2d0/0x2d0
[ 3232.206759][ T3897]  ? __msan_warning+0x96/0x110
[ 3232.211722][ T3897]  ? af_alg_free_resources+0x3d1/0xf60
[ 3232.217380][ T3897]  ? skcipher_recvmsg+0x6a0/0x1a20
[ 3232.222687][ T3897]  ? __sys_recvfrom+0x505/0x810
[ 3232.227730][ T3897]  ? __x64_sys_recvfrom+0x126/0x1d0
[ 3232.233123][ T3897]  ? do_syscall_64+0x41/0xc0
[ 3232.237907][ T3897]  ? entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3232.244279][ T3897]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3232.250318][ T3897]  ? extract_iter_to_sg+0x31d7/0x3480
[ 3232.255931][ T3897]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 3232.262410][ T3897]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3232.268447][ T3897]  __msan_warning+0x96/0x110
[ 3232.273240][ T3897]  af_alg_free_resources+0x3d1/0xf60
[ 3232.278762][ T3897]  skcipher_recvmsg+0x6a0/0x1a20
[ 3232.283934][ T3897]  ? skcipher_sendmsg+0x100/0x100
[ 3232.289183][ T3897]  __sys_recvfrom+0x505/0x810
[ 3232.294096][ T3897]  ? kmsan_get_shadow_origin_ptr+0x4d/0xa0
[ 3232.300143][ T3897]  ? xfd_validate_state+0x89/0x210
[ 3232.305460][ T3897]  __x64_sys_recvfrom+0x126/0x1d0
[ 3232.310703][ T3897]  do_syscall_64+0x41/0xc0
[ 3232.315321][ T3897]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 3232.321457][ T3897] RIP: 0033:0x7f071d47cae9
[ 3232.325991][ T3897] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 3232.345788][ T3897] RSP: 002b:00007f071e2210c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 3232.354380][ T3897] RAX: ffffffffffffffda RBX: 00007f071d59bf80 RCX: 00007f071d47cae9
[ 3232.362497][ T3897] RDX: 0000000000059007 RSI: 0000000020000080 RDI: 0000000000000006
[ 3232.370600][ T3897] RBP: 00007f071d4c847a R08: 0000000000000000 R09: 0100000000000000
[ 3232.378743][ T3897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3232.386861][ T3897] R13: 000000000000000b R14: 00007f071d59bf80 R15: 00007f071d6bfa48
[ 3232.395011][ T3897]  </TASK>
[ 3232.398468][ T3897] Kernel Offset: disabled
[ 3232.402880][ T3897] Rebooting in 86400 seconds..