8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000002180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f0000001040)={0x10dc, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x109c, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x89, 0x2, "45ec9b49bba14756039f0e2449973ed716562034172c1dfd433853086ee5bb6dbaae67dcf09512768e8ca0251b8918dc18e1fb294cda53270c26c8191baf135cc5c5546a7cff55d25992a1c64b3292f824299f93ee1fd2b75e006d23edc0ad00b65df31fff55c29095763fe229683a4cec6c6606b74d8ad83ce9b34463caa1e8004103233a"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "c6143b46d34ccf4094b3469bf25a6ac066b1340baca4a81b458462c097cc10f0d72ab3175307e63bffa983bc67aaea6e088011220f4dd6b58c9cddace4779fc0195bd12cf36ced3c86159d2af468d46d5a94d02d69cc0b3b951e9330be26cd899043268d25598f3122c9ee5746d86cb5a6c2f3e9a895012f18ff3c790bcbf6f88828f0ef12e40970b2235518aeb06fc47e9948b5b9f7701153e4deacabfc57f4b7b245b7dd137d9252b4303ce263eb3a29faea465459460ffd9f14077c992f39225a917877e195a37a9a05d3d0d5ffff9b43ef53578af55d9d50b852c40198c912b271eee345a50f680f3ce943ac6dba86c66646b926f4862511031516e62688ee63f4b3a4ee251e7729d133e9dd362c599ff7e222c5789bd5c5046c519e56ac2d9c219d950d6e4fd43f897d7f0772fbe488ee97e02a4bb45268096c98ba36f6b794861800a840cd51d99d0642ef980b16110e1d25d9af16da16f06a8005b83c200e731376664762796873505030de9116ffaab7989457903f26e5e74b58a5e409be3815452b30e510f7f6c3d0fd4be2841855681e102cad649bb144ac60a9ea8336f4108b48a55fd2d9017c41aa37d8f0d74c45d370b8656e49923f975f1af41d6b14d79dd19d9bfcfbe31dd11e3539be68462cc13283ddfa7e3913f8196c3ed6b1990f886fb6125be1890b5b33e75337cc60d9cad3dab885f79cdc0e5e3686969fa8626f060148ad3238cc2e329539e5b429491d20ee7af1d1bb73fa340fc9257dc9977611e44a5233c6718f3f5f03ade3fa14bc956231df69b5c960a870ad47d0f4549e9877d68d8f51bcb0fc84d7deb7d6893b3bf4f32ff33fd5ffbf225f205258e269f51944c920b2e3c4eac61fed55191fb71f818ce6dc290b1c6120b5bcca17febe7fd05739c2e24c9236c6ad651ae047631be0bc81eda3db3a6fbd643e564449d50c4cb2c202c5a6ad81cd037f54645ddd96843a7e6509bfa30f34c81b1765719f63a1db2e5da0d9180415c1b71155bd6c9f00b59a3874efe8c817be62ae585911caa235005096e8c368ddead81e675207f88109f6398d3408b2289e067d833eec48662d6cb5337f40fa99608080e5fdbbb615ffe7c139b4665e6bb893772da02ab3c46814f7a48b48f933ab0c14d020226b6f829b0b868b73280971b51fd2de5961a4cb411c52f975ce62f674ae17ae7b921e9ce790a567a3d785723ad36b7a78605a6c1c002728b236eb7bff17347ba8e290ee09cd8d03821a97f3bc0ef2af2d266e56cc705aa8138e5d053eaa62f7280a3323bf422f7a06c82c7e41ec32e1f0a4e932951ff4e5cad37bd4764d736922842226c9b36c45ac65bdee11f268dac325f9fea3f1b65af081a04bc7c5cffd06f6f3e0011444eb32bde91e80ef269ae89c8410ad90fc44ec34ab9bd6b81776693e7807d1b29542486d526121cc2ff29bac5853e3f8b6cfdf3f8a187652c257aea5aed476fff5cbdf5beeb6cb955883ce585111facbdf0bd39b972921daa4eed2ad90bfe64e0a9da5b5380a5da5245890d87dca642417e1be5b7c413d16f89db1341a29c2ddf96157ab54f9951c1186b47ddacbce205cd39938106a27641d889b66db4c3dd773215cc2ff11f8c9afab8c8c2ce322cf3f1c43e11e44d7b723af4490584dbf8239ba51833ca5d633ff008f9fe1c0b210ffe0768aa00b3517766e1de5971826d5f4f4a5ed339b26cf2fdd5e3cc8eb477b96312f7285ab432b121ffa45b1dfdaccfdd2bb10375d15dec38d7cd64e2da3e460d721f96a4f3960378ab6c95906fe506c37b3aa99e9f11a01ec82b6f13b0a965942c31571d1b5852a0c891fe7d6b8ecb85ade1408a530dbc461bb4f81dd3116d80dcff41da6c72052c423ce0eec4a6ebac7d4ea59fad87933b5b975e3910f7d36ce0582a01028c4f82c5111e27404f1591f93e6fa82bec155e5e6176186dff65d3a5bf00bd5797b1acc3cca7cc28d08d4c23205f1a3e25404473c60cff043e263bc1b906d0b26c9ead116fc0fc8eea85bb3444c52d463aa957d10e95b996a127baf88b37ab053ede17b93ad3bc9515778a2b7fbfddbdea092eece7852b4194dfda72a906833b35b4ad8bfef2ad2b9d47f184cc66641ba36da4046689b7e50347511611915750777d6ec98b0f90d70d25e679f4e77ac3b6c42282e9ffcef26f236370b2e7e0f3765842370a4ddbbee76dc05a8810483c41d60ed31821d8ac86e47a8db7f5fd06bffd9ca58af3082f176020acbb8129d95eebb3b61a8dfbb7d47b3a6fb7f852fb2eff09cf4327db444a4c07f3b58e4c1dd58b793d9a964c56cbbc1385f1eff70d58119038a94ecd786d4c13c954aa7d76ad1ffe8258edc778d6d14a75ec92f127d8643d7f5cd20b63e4e800871539acab14a227aaa94c773ec0689190ec18d90eb5b4747b12b121e776373d35bddad10cd647396f86d790ae9ad2b12dbc766253ffc292e55aac4908c8c6e5a6929a261fc6206d765ecd24da2f9f1c3f96a0b3df8dde51fd19eb65b008aefc6959dbeeba80678658b7971ac1e6fb2d5f24059adc4b1da600dc6b822c41be6db243ecaa5df6742e25f398f243684a70c782d2c48aed73d5a33e362f856c54102b913dc75af2f8d55a1a6dcd366524e240336074cfecd787105baafdd0ce97e67519469774ab3dc7253e56d874b9de78495ad299a47076440b2c0801cb225159f4d68c42f4b9ae3d4520b711eee5ee29130b3f06ff8bc9622b7347a27e64734e891b8c4078cb13bfd4cd95f3033751c858b1263c38fa977738b8c08cb6545261dff08434c5140412d5f13b1f214d49dcfc467b2268ce731b06075300713bd705d17cc6b48794343668e249a0872ef4989ead735c82ae6341dd474b4c1f5fdac360f4c3f6fe78e5af6082d37206e7c39787a0f4e12d88a820b13c742c204961269d1f01b384e57a0a9d8607ad170c2c2106c8c717d002a3f01d28a0b49f9b69df4d2de6ee67e891783c3ce61b32dcbd7a21cce88e3ec851b25069ab44da6c5b9ee727be243b841f5a71101aad5cf42208996d0a4a0dcced74c1630a05bfd27a38f059930edb8a8f595c3d04a488bf9cdf01eac38302f24643b83838e6395f069ae494351855db3f8f7ca96f0f76e99ee306817e876f77c4e302fca8da4d5f3f558de70d3411b463c501def527586267e853cff7819ce6a43ccc14ceb37c7d51033196b3e1cf88bcf573f3decbd742865cf2746dfe9cebc1a3934afdad956f3f8bbdd85a2e6134c60deb19be8a0c77f16bbf79ddc2acb2fd50c211b4bae84e14f945527201b774c207a788cd22b702fa9ed3138155a347785f6539df0065edf1c2c3a0eed6edf0701a4eda4d7ae42ea79975fde1c67c464a8e922792a623d1c916c40daba31ea65eba79f7746d2bd599bab2ecc28a7f492a1036dc9246ef0b51e44c8607584071eb13786a655d7e0a5331bbc32e1dfc5f503287926c9a10ecdfc8603fa21e75fbc7a06e26057f5b5e4156de4518f4f53d624fdb27973fce1ec0040c5d18f3229d3eea1159c51d941bc778a05070a1b498087ef109e0c049a9bc5cced002fc4b3b13f96d8336ad996a96641e609db37d98fad878bba64d205a910f788eb4e6b9a0ab9671293df0e4f737884cd4148318f8ac0eb6bb9674de6ed9d16c43aea2e6b0c5c341fd30d608221b114fc084dac03a8fd81f0a994e5e9e18dc0ba9c808e9e78de141aeea563f6a86907036fd618541424d618a266cdabef2089e49e4d03f51f5bb116599a98df76950c7b8fec93bb6c70fe6ee23a4a69cfc36c9b490576fe953b7a63e89b9531b3c68ad13add75ae462083c192f04e8e7e9a06fa2b196068dd79c6f7dbdaf66de57018558cde0e6c7be280a096adfdbb6ed288e8c6944891487e36ff5c4e433f017696106a726b01012005d2b6f84f00e44b7d2336f5c2c33e164bc05ae697fd678ce47826315ee818ecc21a669600ca0058b084388f39ead286781d7cb2d26cf4d9790f706245e8e83ae931a037b40244cb57f4a1826477cbdadedabe2fee736573d9153d54b899aed81e800b0bd4359354ca803b254637d3003cbedd67080d4fb1b50799864f4bb9b113c3f5c8fb56ee63468ca556ea65b4f3d57100432e4cc1aa1727c0c91933cb2b7dcc62081e7a2f0beb339bab63dfdbe7e98b400eaa7a12bdf4a5b0a43aee838b8f1754eefa744ddf0198bfa8bd7db0ea0e28994032390715f9e51693ddc411c69b3f213d1713ff51b0f20fbdc973582282f8e6686a5756190054106d89da324bec0024cb3ff95d463ef685ee7a8ab338a7ac278dd9f5340007b00515bab8c6678f7189fcf464f9ee90df9a0d911a631ece23715b4be4e06d3c021487e20f0fd039f1917893bf6c349f4b9ea38b19d78a5085837979707aced15efebccbe5febaeb7ce6c2c989393161da44010769d845b052ebe4a27e9cd43bd45b72fed5e55a8cf622af6cb11e4639a15605205a0421c4a6a204176ecf723087d5d7e57425a05e8fd94e2a1cead86f5212ee342590ff4b50dac28a3f2b4308f38148ae0cdd5dd7921f25f88c08d37791253f43b3cc98a67ebcb7e4a2dd54e3716fd7fcd1a28603b08e66eb215991f998321a88fd20c2ddf5dab91d8ea90bcd40dfa37836e45690643231d23a1ac3b54a5a866b1f16adaed49bb9fcf3bfe81878d3fb9dc1aa36f9399c761b578f3afa33c9657d98328d5e6a4b8069dad411431cbda97a0cfde3be65d06f17bab7685602965c192b8e45cf9640d4b89535034509bd09a58c39dc5c067ed27a5ebbf7f20854c17f0afb497b46637ec031161eaa870ba3ea1f569b5f17e8ecafa2d64d587364945cd15c5d7808a8f41c618b9755a9039ced0995ed5364de57065b3a2667d10a3a4eb14f047b1dbfc7c28f8fc4eeaca7ca87e3fdae80565caef81e94f6c34318c77f820d191bb4f92833473dbddb1117758afd65df5b9c46b70ed30624e189c7593cb1c478f804f4bcb3adcc71b9ba614b4d54289d8f40fdf8334c99943e69eb4383541dcde1d172ddabe4f70e6866ef9474efaaa6c403c2962d4ad3c181d72091784dacb95f937acfaf236d881f10c6a72a8f5ecdcd80a86394682c850453da871dd22f7fdba5cd3bc66dd4b7bc677020374b767a45f36180ce15db74facaf8379458c5e089849457c7ae5ec3a7f71d0f7946718bbb044258e3b920a7fd44959cbe4d3e25bed07334d18f10134f6dfb47a46ba1954f0a813cb489962ae2f44d8fb5c493e573d6de58c7802a0c85658ed51f4d6c3b8162df8951fbc0f19f33aeae345f28ae016b3bfe2d95f2d0ca1fb5179d65dd99103d6466d9518d765e311637cf8e1e2986fea05e26dd4637acb660adce62522307d1531ed99d863cc4cba99671dd5374ee690288375f90a188bfb19a4f60b2f55f01f76a69b4b76fa08ea532484187512480baa7390b9eb732f0af1d621bd4af6aeefa65f109b56721522a4fa44a513cc3a739c5f13d73fac6e3f653bd0129c0e40ed79f76e030890217eedc3f4ef8254ee1ac5e738efef3eccec695f93f8ebe1a25fbb0ae57e959f7715c9ba7acd4d0f50785ab32b8cb63c3bbee10a9bb31fc8a8f3f8aee88f86616e6c9147232b1702b8fdf39d1e98cdb33a0fdf21cefa1efecf1a858b783771c14da270ee01a96e781e4e19fba671a6a79aad698ce8bfb87c5ea58eba104e34a442fb311e9fac355a2b83280c765e9e31f62cd0440657c718e6555a6b96004ad09b6f0af5e1e67cd40c79915ad696274e86b9630796f8cd3ca4a18fba6cc5553e4a187311d"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa4, r5, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x81}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x38, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xac60}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="8d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x22}, {0x8, 0x0, 0xfffff000}, {0x8, 0x0, 0xdb78}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x5}, {0x8}, {0x8, 0x0, 0x1ff}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4f}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) 22:33:15 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000a00)) clock_getres(0x2, &(0x7f0000000a40)) r1 = dup3(r0, r0, 0x0) connect$inet(r1, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:33:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4d0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40) 22:33:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r4 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000580)=r5, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000008c0)={{}, 0x8, &(0x7f0000000880)=[0x3ff, 0x27c2, 0x2, 0x8, 0x7, 0x1, 0xfffffffffffff702, 0x4], 0x4, 0x3, [0xfff, 0x8, 0x81, 0x10000]}) [ 68.572747] audit: type=1400 audit(1756765995.256:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 22:33:15 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2, r4], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x81, 0x68}}}}}, 0x28}}, 0x20000000) [ 69.830947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.835513] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.837602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.839544] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.841577] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.846556] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.848914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.850680] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.855367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.858391] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.863294] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.863507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.866565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.871615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.882410] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.891688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.903315] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.908203] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.909397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.915359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.916914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 69.921094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 69.922406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.926322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 69.928752] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 69.940565] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.941293] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 69.943446] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.946302] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.949463] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 69.955576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 69.955697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 69.960651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.961929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 69.963082] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 69.965679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 69.967328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 69.976477] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 69.989269] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 69.991677] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 71.921490] Bluetooth: hci0: command tx timeout [ 71.922897] Bluetooth: hci1: command tx timeout [ 71.985095] Bluetooth: hci3: command tx timeout [ 71.985721] Bluetooth: hci2: command tx timeout [ 72.050142] Bluetooth: hci7: command tx timeout [ 72.050709] Bluetooth: hci5: command tx timeout [ 72.051259] Bluetooth: hci6: command tx timeout [ 72.051722] Bluetooth: hci4: command tx timeout [ 73.969400] Bluetooth: hci1: command tx timeout [ 73.969908] Bluetooth: hci0: command tx timeout [ 74.033202] Bluetooth: hci3: command tx timeout [ 74.033701] Bluetooth: hci2: command tx timeout [ 74.097042] Bluetooth: hci5: command tx timeout [ 74.097291] Bluetooth: hci4: command tx timeout [ 74.097540] Bluetooth: hci6: command tx timeout [ 74.097968] Bluetooth: hci7: command tx timeout [ 76.017122] Bluetooth: hci0: command tx timeout [ 76.017811] Bluetooth: hci1: command tx timeout [ 76.082340] Bluetooth: hci2: command tx timeout [ 76.082984] Bluetooth: hci3: command tx timeout [ 76.145269] Bluetooth: hci7: command tx timeout [ 76.148073] Bluetooth: hci5: command tx timeout [ 76.148644] Bluetooth: hci6: command tx timeout [ 76.149689] Bluetooth: hci4: command tx timeout [ 78.065063] Bluetooth: hci0: command tx timeout [ 78.065081] Bluetooth: hci1: command tx timeout [ 78.130231] Bluetooth: hci3: command tx timeout [ 78.130681] Bluetooth: hci2: command tx timeout [ 78.194081] Bluetooth: hci4: command tx timeout [ 78.194146] Bluetooth: hci6: command tx timeout [ 78.194504] Bluetooth: hci5: command tx timeout [ 78.195579] Bluetooth: hci7: command tx timeout [ 108.553763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.554476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.746947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.748202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.246498] audit: type=1400 audit(1756766035.929:8): avc: denied { kernel } for pid=3747 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 109.258192] audit: type=1400 audit(1756766035.929:9): avc: denied { open } for pid=3747 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 22:33:56 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) socketpair(0x1e, 0x6, 0xfa0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r10, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) perf_event_open$cgroup(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x9, 0x21, 0x40, 0x0, 0x4, 0x22848, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f00000005c0), 0x11}, 0x14043, 0x200, 0x8, 0x7, 0x28e, 0x9, 0x8, 0x0, 0x7ff, 0x0, 0x80000000}, r2, 0xb, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:33:56 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) socketpair(0x1e, 0x6, 0xfa0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r10, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) perf_event_open$cgroup(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x9, 0x21, 0x40, 0x0, 0x4, 0x22848, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f00000005c0), 0x11}, 0x14043, 0x200, 0x8, 0x7, 0x28e, 0x9, 0x8, 0x0, 0x7ff, 0x0, 0x80000000}, r2, 0xb, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:33:56 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) socketpair(0x1e, 0x6, 0xfa0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r10, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) perf_event_open$cgroup(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x9, 0x21, 0x40, 0x0, 0x4, 0x22848, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f00000005c0), 0x11}, 0x14043, 0x200, 0x8, 0x7, 0x28e, 0x9, 0x8, 0x0, 0x7ff, 0x0, 0x80000000}, r2, 0xb, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) [ 109.894141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.894753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:33:56 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) socketpair(0x1e, 0x6, 0xfa0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r10, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) perf_event_open$cgroup(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x9, 0x21, 0x40, 0x0, 0x4, 0x22848, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f00000005c0), 0x11}, 0x14043, 0x200, 0x8, 0x7, 0x28e, 0x9, 0x8, 0x0, 0x7ff, 0x0, 0x80000000}, r2, 0xb, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) [ 110.051049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.051666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:33:56 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) socketpair(0x1e, 0x6, 0xfa0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r10, &(0x7f0000000580)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) [ 110.165467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.166160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:33:56 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) socketpair(0x1e, 0x6, 0xfa0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MPATH(r10, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) [ 110.261357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.261957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.361055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.361666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:33:57 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) r6 = syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) r7 = accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000480)) r9 = openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000500)=[r6, r3, r1, r7, r3, r0, r8, r1, r9], 0x9) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:33:57 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000480)) openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) [ 110.498211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.498829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.607280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.607885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.747757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.748673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.965400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.966283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.055482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.056342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.209124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.209966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.218792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.219430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.339402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.340255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.373880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.374675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 22:34:11 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000480)) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:11 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/bus/pnp', 0x151900, 0xc) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:34:11 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4d0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40) 22:34:11 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2, r4], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x81, 0x68}}}}}, 0x28}}, 0x20000000) 22:34:11 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000a00)) clock_getres(0x2, &(0x7f0000000a40)) r1 = dup3(r0, r0, 0x0) connect$inet(r1, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:11 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r4 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000580)=r5, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000008c0)={{}, 0x8, &(0x7f0000000880)=[0x3ff, 0x27c2, 0x2, 0x8, 0x7, 0x1, 0xfffffffffffff702, 0x4], 0x4, 0x3, [0xfff, 0x8, 0x81, 0x10000]}) 22:34:11 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x10001, 0x1000, 0x8}, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x52}, 0x20000094) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c044) r1 = socket(0x29, 0xa, 0x3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4762a601b018"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x83}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x243455af7856528d}, 0x40001) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x810) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1fc, r3, 0x400, 0x70bd25, 0x2, {{}, {@void, @val={0xc, 0x99, {0x7ab2, 0x7a}}}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1d28eb663d3c3e70"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6bc2d891855079c338522c0c545f10d7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fcc27fc64ab6ad0db86350901cd3485983a385b9c1492eec79767689906af3cb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="08a5f70f665fe99e8b63539545234145"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f5000f0d64cc01912d376a2e18551991e0e9774e70caf23aca8e0208f68de01f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="14aec6fe8e18da372f3f4e9c28b6e57d15b3ebf3cd0c3936"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="526852d91065257dc960b71c665e12a9"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="677c5cdd4c4f2c06044ae05e49e18f0b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f8693f520880ce92"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f001b6165b510b85240b5c91f054a5c6c6082b99eb8ca37c292505791dc05ae2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe38169ebbc8cb9c42a07d10c2f93abf33158d1c6d291c77"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8d1b480b0f0936d6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c5fa7cce56255227dcc58861bd031902"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf72}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="437c223c06a16f5d508d79505792c982"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "be9c8cbf798b49b3"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "674eb5756e980ff9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="07ffad5d0650f2c0f7b501c73dc3198a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2b3bfce9a4db3b19cf3bb8e6a91805bd63455761a70fea5c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "42f50703d13691fe"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="27086ec572cf0daa7518e242317bb1cf"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "f7551de3ec6d7c5a5276827ceb94f1398a027e126b591dd7e19d8f961b714f38256de14504ced40b6814a555e4b8ccfc06311f47012dea8a2dea935cce0ba0f11328a4d1cf7d8f366cbd1e2f3ed0f77b7ab4a1cd7f628486fdfad0f18e3ebf3438eda380f23b8cbe8d03efd2be2d37e8c56e43f6071ed41ba5a07b98bd69dd1ae0f40cc0f66916dc8d6d51628b9a122e120220badba7861f0d35bf409ae58bc0d78cc696627bfacec89d175566ca7f872da7cd1911ca67c9e22f3ed48d0f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3ff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x6864cc7bddfe95a2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x12c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x10c, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @random="422f4984c224", {0x3, 0x600}}, 0x0, 0x1, @random=0x8001, @void, @val={0x2d, 0x1a, {0x10, 0x3, 0x4, 0x0, {0x34, 0x0, 0x0, 0xff}, 0x1, 0x7f, 0x3}}, [{0xdd, 0x86, "e09ae6215526ae781b2e1e5b1d8513514bee90c12322b689516b616189b5a96a6be0c742512828c73b8045ba918f79c4e4fae5481f2b7d384684f485391d9f133ffe1b2a77f933e50f2d1e353121a11ad03333920dc105736ff13c9b1b7aa2c1c283aeb2e100817fa463ee143df54bfc4f3021c86378336ba01da575ce9f163b20ed36abca4f"}, {0xdd, 0x44, "3240ef23ae9e8ceb295fcf580a68c172c2b1eccd4ff86f890899a44e4304bc4cba2e9dc6de159b9abc7e984db257e39e685c14bb92fd08bfac1bffa50cba8fbd8dddce68"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004053) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x118, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x4d}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x85dd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe47}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x15000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x1f, 0x1ff, 0x10001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8576}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1000, 0x4, 0x7fffffff, 0x10000]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1b6, 0x1, 0x5e, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 22:34:11 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000002180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f0000001040)={0x10dc, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x109c, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x89, 0x2, "45ec9b49bba14756039f0e2449973ed716562034172c1dfd433853086ee5bb6dbaae67dcf09512768e8ca0251b8918dc18e1fb294cda53270c26c8191baf135cc5c5546a7cff55d25992a1c64b3292f824299f93ee1fd2b75e006d23edc0ad00b65df31fff55c29095763fe229683a4cec6c6606b74d8ad83ce9b34463caa1e8004103233a"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "c6143b46d34ccf4094b3469bf25a6ac066b1340baca4a81b458462c097cc10f0d72ab3175307e63bffa983bc67aaea6e088011220f4dd6b58c9cddace4779fc0195bd12cf36ced3c86159d2af468d46d5a94d02d69cc0b3b951e9330be26cd899043268d25598f3122c9ee5746d86cb5a6c2f3e9a895012f18ff3c790bcbf6f88828f0ef12e40970b2235518aeb06fc47e9948b5b9f7701153e4deacabfc57f4b7b245b7dd137d9252b4303ce263eb3a29faea465459460ffd9f14077c992f39225a917877e195a37a9a05d3d0d5ffff9b43ef53578af55d9d50b852c40198c912b271eee345a50f680f3ce943ac6dba86c66646b926f4862511031516e62688ee63f4b3a4ee251e7729d133e9dd362c599ff7e222c5789bd5c5046c519e56ac2d9c219d950d6e4fd43f897d7f0772fbe488ee97e02a4bb45268096c98ba36f6b794861800a840cd51d99d0642ef980b16110e1d25d9af16da16f06a8005b83c200e731376664762796873505030de9116ffaab7989457903f26e5e74b58a5e409be3815452b30e510f7f6c3d0fd4be2841855681e102cad649bb144ac60a9ea8336f4108b48a55fd2d9017c41aa37d8f0d74c45d370b8656e49923f975f1af41d6b14d79dd19d9bfcfbe31dd11e3539be68462cc13283ddfa7e3913f8196c3ed6b1990f886fb6125be1890b5b33e75337cc60d9cad3dab885f79cdc0e5e3686969fa8626f060148ad3238cc2e329539e5b429491d20ee7af1d1bb73fa340fc9257dc9977611e44a5233c6718f3f5f03ade3fa14bc956231df69b5c960a870ad47d0f4549e9877d68d8f51bcb0fc84d7deb7d6893b3bf4f32ff33fd5ffbf225f205258e269f51944c920b2e3c4eac61fed55191fb71f818ce6dc290b1c6120b5bcca17febe7fd05739c2e24c9236c6ad651ae047631be0bc81eda3db3a6fbd643e564449d50c4cb2c202c5a6ad81cd037f54645ddd96843a7e6509bfa30f34c81b1765719f63a1db2e5da0d9180415c1b71155bd6c9f00b59a3874efe8c817be62ae585911caa235005096e8c368ddead81e675207f88109f6398d3408b2289e067d833eec48662d6cb5337f40fa99608080e5fdbbb615ffe7c139b4665e6bb893772da02ab3c46814f7a48b48f933ab0c14d020226b6f829b0b868b73280971b51fd2de5961a4cb411c52f975ce62f674ae17ae7b921e9ce790a567a3d785723ad36b7a78605a6c1c002728b236eb7bff17347ba8e290ee09cd8d03821a97f3bc0ef2af2d266e56cc705aa8138e5d053eaa62f7280a3323bf422f7a06c82c7e41ec32e1f0a4e932951ff4e5cad37bd4764d736922842226c9b36c45ac65bdee11f268dac325f9fea3f1b65af081a04bc7c5cffd06f6f3e0011444eb32bde91e80ef269ae89c8410ad90fc44ec34ab9bd6b81776693e7807d1b29542486d526121cc2ff29bac5853e3f8b6cfdf3f8a187652c257aea5aed476fff5cbdf5beeb6cb955883ce585111facbdf0bd39b972921daa4eed2ad90bfe64e0a9da5b5380a5da5245890d87dca642417e1be5b7c413d16f89db1341a29c2ddf96157ab54f9951c1186b47ddacbce205cd39938106a27641d889b66db4c3dd773215cc2ff11f8c9afab8c8c2ce322cf3f1c43e11e44d7b723af4490584dbf8239ba51833ca5d633ff008f9fe1c0b210ffe0768aa00b3517766e1de5971826d5f4f4a5ed339b26cf2fdd5e3cc8eb477b96312f7285ab432b121ffa45b1dfdaccfdd2bb10375d15dec38d7cd64e2da3e460d721f96a4f3960378ab6c95906fe506c37b3aa99e9f11a01ec82b6f13b0a965942c31571d1b5852a0c891fe7d6b8ecb85ade1408a530dbc461bb4f81dd3116d80dcff41da6c72052c423ce0eec4a6ebac7d4ea59fad87933b5b975e3910f7d36ce0582a01028c4f82c5111e27404f1591f93e6fa82bec155e5e6176186dff65d3a5bf00bd5797b1acc3cca7cc28d08d4c23205f1a3e25404473c60cff043e263bc1b906d0b26c9ead116fc0fc8eea85bb3444c52d463aa957d10e95b996a127baf88b37ab053ede17b93ad3bc9515778a2b7fbfddbdea092eece7852b4194dfda72a906833b35b4ad8bfef2ad2b9d47f184cc66641ba36da4046689b7e50347511611915750777d6ec98b0f90d70d25e679f4e77ac3b6c42282e9ffcef26f236370b2e7e0f3765842370a4ddbbee76dc05a8810483c41d60ed31821d8ac86e47a8db7f5fd06bffd9ca58af3082f176020acbb8129d95eebb3b61a8dfbb7d47b3a6fb7f852fb2eff09cf4327db444a4c07f3b58e4c1dd58b793d9a964c56cbbc1385f1eff70d58119038a94ecd786d4c13c954aa7d76ad1ffe8258edc778d6d14a75ec92f127d8643d7f5cd20b63e4e800871539acab14a227aaa94c773ec0689190ec18d90eb5b4747b12b121e776373d35bddad10cd647396f86d790ae9ad2b12dbc766253ffc292e55aac4908c8c6e5a6929a261fc6206d765ecd24da2f9f1c3f96a0b3df8dde51fd19eb65b008aefc6959dbeeba80678658b7971ac1e6fb2d5f24059adc4b1da600dc6b822c41be6db243ecaa5df6742e25f398f243684a70c782d2c48aed73d5a33e362f856c54102b913dc75af2f8d55a1a6dcd366524e240336074cfecd787105baafdd0ce97e67519469774ab3dc7253e56d874b9de78495ad299a47076440b2c0801cb225159f4d68c42f4b9ae3d4520b711eee5ee29130b3f06ff8bc9622b7347a27e64734e891b8c4078cb13bfd4cd95f3033751c858b1263c38fa977738b8c08cb6545261dff08434c5140412d5f13b1f214d49dcfc467b2268ce731b06075300713bd705d17cc6b48794343668e249a0872ef4989ead735c82ae6341dd474b4c1f5fdac360f4c3f6fe78e5af6082d37206e7c39787a0f4e12d88a820b13c742c204961269d1f01b384e57a0a9d8607ad170c2c2106c8c717d002a3f01d28a0b49f9b69df4d2de6ee67e891783c3ce61b32dcbd7a21cce88e3ec851b25069ab44da6c5b9ee727be243b841f5a71101aad5cf42208996d0a4a0dcced74c1630a05bfd27a38f059930edb8a8f595c3d04a488bf9cdf01eac38302f24643b83838e6395f069ae494351855db3f8f7ca96f0f76e99ee306817e876f77c4e302fca8da4d5f3f558de70d3411b463c501def527586267e853cff7819ce6a43ccc14ceb37c7d51033196b3e1cf88bcf573f3decbd742865cf2746dfe9cebc1a3934afdad956f3f8bbdd85a2e6134c60deb19be8a0c77f16bbf79ddc2acb2fd50c211b4bae84e14f945527201b774c207a788cd22b702fa9ed3138155a347785f6539df0065edf1c2c3a0eed6edf0701a4eda4d7ae42ea79975fde1c67c464a8e922792a623d1c916c40daba31ea65eba79f7746d2bd599bab2ecc28a7f492a1036dc9246ef0b51e44c8607584071eb13786a655d7e0a5331bbc32e1dfc5f503287926c9a10ecdfc8603fa21e75fbc7a06e26057f5b5e4156de4518f4f53d624fdb27973fce1ec0040c5d18f3229d3eea1159c51d941bc778a05070a1b498087ef109e0c049a9bc5cced002fc4b3b13f96d8336ad996a96641e609db37d98fad878bba64d205a910f788eb4e6b9a0ab9671293df0e4f737884cd4148318f8ac0eb6bb9674de6ed9d16c43aea2e6b0c5c341fd30d608221b114fc084dac03a8fd81f0a994e5e9e18dc0ba9c808e9e78de141aeea563f6a86907036fd618541424d618a266cdabef2089e49e4d03f51f5bb116599a98df76950c7b8fec93bb6c70fe6ee23a4a69cfc36c9b490576fe953b7a63e89b9531b3c68ad13add75ae462083c192f04e8e7e9a06fa2b196068dd79c6f7dbdaf66de57018558cde0e6c7be280a096adfdbb6ed288e8c6944891487e36ff5c4e433f017696106a726b01012005d2b6f84f00e44b7d2336f5c2c33e164bc05ae697fd678ce47826315ee818ecc21a669600ca0058b084388f39ead286781d7cb2d26cf4d9790f706245e8e83ae931a037b40244cb57f4a1826477cbdadedabe2fee736573d9153d54b899aed81e800b0bd4359354ca803b254637d3003cbedd67080d4fb1b50799864f4bb9b113c3f5c8fb56ee63468ca556ea65b4f3d57100432e4cc1aa1727c0c91933cb2b7dcc62081e7a2f0beb339bab63dfdbe7e98b400eaa7a12bdf4a5b0a43aee838b8f1754eefa744ddf0198bfa8bd7db0ea0e28994032390715f9e51693ddc411c69b3f213d1713ff51b0f20fbdc973582282f8e6686a5756190054106d89da324bec0024cb3ff95d463ef685ee7a8ab338a7ac278dd9f5340007b00515bab8c6678f7189fcf464f9ee90df9a0d911a631ece23715b4be4e06d3c021487e20f0fd039f1917893bf6c349f4b9ea38b19d78a5085837979707aced15efebccbe5febaeb7ce6c2c989393161da44010769d845b052ebe4a27e9cd43bd45b72fed5e55a8cf622af6cb11e4639a15605205a0421c4a6a204176ecf723087d5d7e57425a05e8fd94e2a1cead86f5212ee342590ff4b50dac28a3f2b4308f38148ae0cdd5dd7921f25f88c08d37791253f43b3cc98a67ebcb7e4a2dd54e3716fd7fcd1a28603b08e66eb215991f998321a88fd20c2ddf5dab91d8ea90bcd40dfa37836e45690643231d23a1ac3b54a5a866b1f16adaed49bb9fcf3bfe81878d3fb9dc1aa36f9399c761b578f3afa33c9657d98328d5e6a4b8069dad411431cbda97a0cfde3be65d06f17bab7685602965c192b8e45cf9640d4b89535034509bd09a58c39dc5c067ed27a5ebbf7f20854c17f0afb497b46637ec031161eaa870ba3ea1f569b5f17e8ecafa2d64d587364945cd15c5d7808a8f41c618b9755a9039ced0995ed5364de57065b3a2667d10a3a4eb14f047b1dbfc7c28f8fc4eeaca7ca87e3fdae80565caef81e94f6c34318c77f820d191bb4f92833473dbddb1117758afd65df5b9c46b70ed30624e189c7593cb1c478f804f4bcb3adcc71b9ba614b4d54289d8f40fdf8334c99943e69eb4383541dcde1d172ddabe4f70e6866ef9474efaaa6c403c2962d4ad3c181d72091784dacb95f937acfaf236d881f10c6a72a8f5ecdcd80a86394682c850453da871dd22f7fdba5cd3bc66dd4b7bc677020374b767a45f36180ce15db74facaf8379458c5e089849457c7ae5ec3a7f71d0f7946718bbb044258e3b920a7fd44959cbe4d3e25bed07334d18f10134f6dfb47a46ba1954f0a813cb489962ae2f44d8fb5c493e573d6de58c7802a0c85658ed51f4d6c3b8162df8951fbc0f19f33aeae345f28ae016b3bfe2d95f2d0ca1fb5179d65dd99103d6466d9518d765e311637cf8e1e2986fea05e26dd4637acb660adce62522307d1531ed99d863cc4cba99671dd5374ee690288375f90a188bfb19a4f60b2f55f01f76a69b4b76fa08ea532484187512480baa7390b9eb732f0af1d621bd4af6aeefa65f109b56721522a4fa44a513cc3a739c5f13d73fac6e3f653bd0129c0e40ed79f76e030890217eedc3f4ef8254ee1ac5e738efef3eccec695f93f8ebe1a25fbb0ae57e959f7715c9ba7acd4d0f50785ab32b8cb63c3bbee10a9bb31fc8a8f3f8aee88f86616e6c9147232b1702b8fdf39d1e98cdb33a0fdf21cefa1efecf1a858b783771c14da270ee01a96e781e4e19fba671a6a79aad698ce8bfb87c5ea58eba104e34a442fb311e9fac355a2b83280c765e9e31f62cd0440657c718e6555a6b96004ad09b6f0af5e1e67cd40c79915ad696274e86b9630796f8cd3ca4a18fba6cc5553e4a187311d"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa4, r5, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x81}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x38, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xac60}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="8d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x22}, {0x8, 0x0, 0xfffff000}, {0x8, 0x0, 0xdb78}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x5}, {0x8}, {0x8, 0x0, 0x1ff}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4f}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) 22:34:20 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000a00)) clock_getres(0x2, &(0x7f0000000a40)) r1 = dup3(r0, r0, 0x0) connect$inet(r1, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:20 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/bus/pnp', 0x151900, 0xc) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:34:20 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) accept4$unix(r2, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r4 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000580)=r5, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000008c0)={{}, 0x8, &(0x7f0000000880)=[0x3ff, 0x27c2, 0x2, 0x8, 0x7, 0x1, 0xfffffffffffff702, 0x4], 0x4, 0x3, [0xfff, 0x8, 0x81, 0x10000]}) 22:34:20 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2, r4], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x81, 0x68}}}}}, 0x28}}, 0x20000000) 22:34:20 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x10001, 0x1000, 0x8}, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x52}, 0x20000094) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c044) r1 = socket(0x29, 0xa, 0x3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4762a601b018"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x83}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x243455af7856528d}, 0x40001) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x810) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1fc, r3, 0x400, 0x70bd25, 0x2, {{}, {@void, @val={0xc, 0x99, {0x7ab2, 0x7a}}}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1d28eb663d3c3e70"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6bc2d891855079c338522c0c545f10d7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fcc27fc64ab6ad0db86350901cd3485983a385b9c1492eec79767689906af3cb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="08a5f70f665fe99e8b63539545234145"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f5000f0d64cc01912d376a2e18551991e0e9774e70caf23aca8e0208f68de01f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="14aec6fe8e18da372f3f4e9c28b6e57d15b3ebf3cd0c3936"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="526852d91065257dc960b71c665e12a9"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="677c5cdd4c4f2c06044ae05e49e18f0b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f8693f520880ce92"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f001b6165b510b85240b5c91f054a5c6c6082b99eb8ca37c292505791dc05ae2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe38169ebbc8cb9c42a07d10c2f93abf33158d1c6d291c77"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8d1b480b0f0936d6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c5fa7cce56255227dcc58861bd031902"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf72}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="437c223c06a16f5d508d79505792c982"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "be9c8cbf798b49b3"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "674eb5756e980ff9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="07ffad5d0650f2c0f7b501c73dc3198a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2b3bfce9a4db3b19cf3bb8e6a91805bd63455761a70fea5c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "42f50703d13691fe"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="27086ec572cf0daa7518e242317bb1cf"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "f7551de3ec6d7c5a5276827ceb94f1398a027e126b591dd7e19d8f961b714f38256de14504ced40b6814a555e4b8ccfc06311f47012dea8a2dea935cce0ba0f11328a4d1cf7d8f366cbd1e2f3ed0f77b7ab4a1cd7f628486fdfad0f18e3ebf3438eda380f23b8cbe8d03efd2be2d37e8c56e43f6071ed41ba5a07b98bd69dd1ae0f40cc0f66916dc8d6d51628b9a122e120220badba7861f0d35bf409ae58bc0d78cc696627bfacec89d175566ca7f872da7cd1911ca67c9e22f3ed48d0f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3ff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x6864cc7bddfe95a2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x12c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x10c, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @random="422f4984c224", {0x3, 0x600}}, 0x0, 0x1, @random=0x8001, @void, @val={0x2d, 0x1a, {0x10, 0x3, 0x4, 0x0, {0x34, 0x0, 0x0, 0xff}, 0x1, 0x7f, 0x3}}, [{0xdd, 0x86, "e09ae6215526ae781b2e1e5b1d8513514bee90c12322b689516b616189b5a96a6be0c742512828c73b8045ba918f79c4e4fae5481f2b7d384684f485391d9f133ffe1b2a77f933e50f2d1e353121a11ad03333920dc105736ff13c9b1b7aa2c1c283aeb2e100817fa463ee143df54bfc4f3021c86378336ba01da575ce9f163b20ed36abca4f"}, {0xdd, 0x44, "3240ef23ae9e8ceb295fcf580a68c172c2b1eccd4ff86f890899a44e4304bc4cba2e9dc6de159b9abc7e984db257e39e685c14bb92fd08bfac1bffa50cba8fbd8dddce68"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004053) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x118, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x4d}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x85dd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe47}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x15000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x1f, 0x1ff, 0x10001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8576}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1000, 0x4, 0x7fffffff, 0x10000]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1b6, 0x1, 0x5e, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 22:34:20 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4d0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40) 22:34:20 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000002180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f0000001040)={0x10dc, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x109c, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x89, 0x2, "45ec9b49bba14756039f0e2449973ed716562034172c1dfd433853086ee5bb6dbaae67dcf09512768e8ca0251b8918dc18e1fb294cda53270c26c8191baf135cc5c5546a7cff55d25992a1c64b3292f824299f93ee1fd2b75e006d23edc0ad00b65df31fff55c29095763fe229683a4cec6c6606b74d8ad83ce9b34463caa1e8004103233a"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa4, r5, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x81}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x38, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xac60}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="8d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x22}, {0x8, 0x0, 0xfffff000}, {0x8, 0x0, 0xdb78}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x5}, {0x8}, {0x8, 0x0, 0x1ff}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4f}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) 22:34:20 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r4 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000580)=r5, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r6, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) ioctl$BTRFS_IOC_SEND(r3, 0x40489426, &(0x7f00000008c0)={{}, 0x8, &(0x7f0000000880)=[0x3ff, 0x27c2, 0x2, 0x8, 0x7, 0x1, 0xfffffffffffff702, 0x4], 0x4, 0x3, [0xfff, 0x8, 0x81, 0x10000]}) 22:34:21 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) syz_io_uring_setup(0x67e3, &(0x7f00000002c0)={0x0, 0xa38e, 0x8, 0x2, 0x1ae}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000380)) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:21 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2, r4], 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x81, 0x68}}}}}, 0x28}}, 0x20000000) 22:34:21 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000002180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f0000001040)={0x10dc, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x109c, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x89, 0x2, "45ec9b49bba14756039f0e2449973ed716562034172c1dfd433853086ee5bb6dbaae67dcf09512768e8ca0251b8918dc18e1fb294cda53270c26c8191baf135cc5c5546a7cff55d25992a1c64b3292f824299f93ee1fd2b75e006d23edc0ad00b65df31fff55c29095763fe229683a4cec6c6606b74d8ad83ce9b34463caa1e8004103233a"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0xa4, r5, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x81}}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x38, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xac60}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x5, 0x1, @random="8d"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x22}, {0x8, 0x0, 0xfffff000}, {0x8, 0x0, 0xdb78}, {0x8, 0x0, 0x800}, {0x8, 0x0, 0x5}, {0x8}, {0x8, 0x0, 0x1ff}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x4f}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8001}, 0x4000010) 22:34:29 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2, r4], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), 0xffffffffffffffff) 22:34:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:29 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/bus/pnp', 0x151900, 0xc) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000002}, 0x20000000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:34:29 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000002180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f0000001040)={0x10dc, r5, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x109c, 0x3, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x89, 0x2, "45ec9b49bba14756039f0e2449973ed716562034172c1dfd433853086ee5bb6dbaae67dcf09512768e8ca0251b8918dc18e1fb294cda53270c26c8191baf135cc5c5546a7cff55d25992a1c64b3292f824299f93ee1fd2b75e006d23edc0ad00b65df31fff55c29095763fe229683a4cec6c6606b74d8ad83ce9b34463caa1e8004103233a"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x1004, 0x1, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x10dc}, 0x1, 0x0, 0x0, 0x40}, 0x0) 22:34:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r8) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)={0xc8, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcff}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4d0}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40) 22:34:29 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x10001, 0x1000, 0x8}, 0xc) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x1000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7ff, 0x13}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x52}, 0x20000094) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4c044) r1 = socket(0x29, 0xa, 0x3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x4a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4762a601b018"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000000) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x83}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x243455af7856528d}, 0x40001) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x810) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1fc, r3, 0x400, 0x70bd25, 0x2, {{}, {@void, @val={0xc, 0x99, {0x7ab2, 0x7a}}}}, [@NL80211_ATTR_REKEY_DATA={0xa4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1d28eb663d3c3e70"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6bc2d891855079c338522c0c545f10d7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fcc27fc64ab6ad0db86350901cd3485983a385b9c1492eec79767689906af3cb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="08a5f70f665fe99e8b63539545234145"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f5000f0d64cc01912d376a2e18551991e0e9774e70caf23aca8e0208f68de01f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="14aec6fe8e18da372f3f4e9c28b6e57d15b3ebf3cd0c3936"}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="526852d91065257dc960b71c665e12a9"}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="677c5cdd4c4f2c06044ae05e49e18f0b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f8693f520880ce92"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f001b6165b510b85240b5c91f054a5c6c6082b99eb8ca37c292505791dc05ae2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="fe38169ebbc8cb9c42a07d10c2f93abf33158d1c6d291c77"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8d1b480b0f0936d6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c5fa7cce56255227dcc58861bd031902"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf72}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="437c223c06a16f5d508d79505792c982"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "be9c8cbf798b49b3"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "674eb5756e980ff9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="07ffad5d0650f2c0f7b501c73dc3198a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2b3bfce9a4db3b19cf3bb8e6a91805bd63455761a70fea5c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "42f50703d13691fe"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="27086ec572cf0daa7518e242317bb1cf"}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r2) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000cc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10c, r4, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc2, 0xc5, "f7551de3ec6d7c5a5276827ceb94f1398a027e126b591dd7e19d8f961b714f38256de14504ced40b6814a555e4b8ccfc06311f47012dea8a2dea935cce0ba0f11328a4d1cf7d8f366cbd1e2f3ed0f77b7ab4a1cd7f628486fdfad0f18e3ebf3438eda380f23b8cbe8d03efd2be2d37e8c56e43f6071ed41ba5a07b98bd69dd1ae0f40cc0f66916dc8d6d51628b9a122e120220badba7861f0d35bf409ae58bc0d78cc696627bfacec89d175566ca7f872da7cd1911ca67c9e22f3ed48d0f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xeb}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3ff}]}, 0x10c}, 0x1, 0x0, 0x0, 0x6864cc7bddfe95a2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000f40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x12c, r6, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x10c, 0x33, @assoc_resp={@wo_ht={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @random="422f4984c224", {0x3, 0x600}}, 0x0, 0x1, @random=0x8001, @void, @val={0x2d, 0x1a, {0x10, 0x3, 0x4, 0x0, {0x34, 0x0, 0x0, 0xff}, 0x1, 0x7f, 0x3}}, [{0xdd, 0x86, "e09ae6215526ae781b2e1e5b1d8513514bee90c12322b689516b616189b5a96a6be0c742512828c73b8045ba918f79c4e4fae5481f2b7d384684f485391d9f133ffe1b2a77f933e50f2d1e353121a11ad03333920dc105736ff13c9b1b7aa2c1c283aeb2e100817fa463ee143df54bfc4f3021c86378336ba01da575ce9f163b20ed36abca4f"}, {0xdd, 0x44, "3240ef23ae9e8ceb295fcf580a68c172c2b1eccd4ff86f890899a44e4304bc4cba2e9dc6de159b9abc7e984db257e39e685c14bb92fd08bfac1bffa50cba8fbd8dddce68"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004053) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x118, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80, 0x4d}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x85dd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7ff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xe47}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x15000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x1f, 0x1ff, 0x10001]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8576}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1000, 0x4, 0x7fffffff, 0x10000]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1b6, 0x1, 0x5e, 0x5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x12}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7ff}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 22:34:29 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408701, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:29 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000a00)) clock_getres(0x2, &(0x7f0000000a40)) r1 = dup3(r0, r0, 0x0) connect$inet(r1, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r8) 22:34:29 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000240)={0x5, 0x0, &(0x7f0000000200)=[r3, r0, r0, r0, r0, r4]}, 0x6) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) 22:34:29 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000800)=[r2, r4], 0x2) 22:34:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:29 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:29 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:29 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000a00)) clock_getres(0x2, &(0x7f0000000a40)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) 22:34:29 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80, 0x64}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x4812) 22:34:29 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:38 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:38 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000880)='/sys/bus/pnp', 0x151900, 0xc) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:34:38 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000a00)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:38 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) socket$nl_generic(0x10, 0x3, 0x10) 22:34:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x0, 0x420, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) 22:34:38 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000fc0)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000) 22:34:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r7) 22:34:38 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) fremovexattr(r1, &(0x7f0000000100)=@random={'security.', 'devices.deny\x00'}) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:38 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000a40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x1ac, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x4e, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x9, 0x1}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates={0x1, 0x7, [{0x1b, 0x1}, {0x5a, 0x1}, {0x2}, {0x6c, 0x1}, {0x36, 0x1}, {0x16}, {0x30, 0x1}]}, @ht={0x2d, 0x1a, {0x8810, 0x1, 0x1, 0x0, {0x80000000, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x3}, 0x300, 0x2000000, 0x81}}, @ssid={0x0, 0x3, @random="3237f7"}, @link_id={0x65, 0x12}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@fast_bss_trans={0x37, 0xbb, {0x2, 0x4, "a127ebfd5a0790fe19a489a6b47aafaf", "94766d22289f55b283b355e9d5f2f81622a028fbaca1df92f5ab359324b54829", "d8405310205819e6c9f33ebe2467afb723100a50be5eaecba6e3dc5c3dd449fb", [{0x2, 0x1d, "004fc4bbec1d4747568161a6893d7889a1aba6f4b5e2bbd5db852a1a3b"}, {0x4, 0x23, "4d2507ff3a05604cc886a1ae4aa47ea59d5916ce4c62397585c96ead344287ad9c8278"}, {0x3, 0xa, "38e886e89b30fd7eb03b"}, {0x1, 0x17, "aec8ab9154280b1a6bbdf49d4f858879c9d74c5e87a178"}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0xe3, 0x2, @device_b, 0x2, "", 0x3, 0x3f, @device_b}}, @challenge={0x10, 0x1, 0x30}, @random={0x8, 0x20, "d1d9d0441d1364881719aac0c1f1dc4f8c34b282475cf0d3581f2b9161485907"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x51, 0x6c, 0x5}}, @link_id={0x65, 0x12, {@random="4321dc7629da", @device_b, @broadcast}}, @prep={0x83, 0x25, @ext={{}, 0x7, 0x6, @broadcast, 0x7ff, @broadcast, 0x4, 0x800, @broadcast, 0x65e}}]}]}, 0x1ac}}, 0x400c000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r7) 22:34:38 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:38 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) 22:34:38 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:47 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:47 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r5, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r5, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x6c, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40) 22:34:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r6) 22:34:47 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:34:47 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0xfffffffffffffffd, 0x4) 22:34:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) openat$cgroup_ro(r5, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) 22:34:47 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000980), &(0x7f00000009c0)=0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:47 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r4, &(0x7f00000005c0), 0x8) 22:34:47 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x100, 0x0) 22:34:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa624}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9d37}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x884}, 0x4800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r6) 22:34:47 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x47e4c000) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:47 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000005c0), 0x8) 22:34:47 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x65}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040070}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r6) 22:34:47 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000840)={'filter\x00', 0xa5, "58453b456789294bbd0d8bbde97162f85d7bcd3a3b1c4673ced158ee6ce0a01739238a9d540fa09a6fac094e22f2c2b0dcd842ac46d698d3b72382aaee2a95a75a5f71866c4e9602cfaa371e24b98e91d76c87c2b4cf3d7f634995b99d562c86a22657415be81e5b11ced182abf30ce8509cbc71982a3840be5507fabb5a632550348d2f7b04455a5722c902c9d75b09193cbfc755e26e0f2d9293bd31cf69de11a1a77818"}, &(0x7f0000000940)=0xc9) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:58 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:58 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x80}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:34:58 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x2008000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@posixacl}, {@version_L}, {@cachetag={'cachetag', 0x3d, '[{]!'}}, {@dfltuid}, {@noextend}, {@debug={'debug', 0x3d, 0x1ff}}, {@posixacl}], [{@smackfsroot={'smackfsroot', 0x3d, '\xca'}}]}}) 22:34:58 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) socketpair(0xa, 0x80000, 0x7, &(0x7f0000000800)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:34:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r5) 22:34:58 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:34:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:58 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000005c0), 0x8) 22:34:58 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000005c0), 0x8) 22:34:58 executing program 1: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_virt_wifi\x00'}, 0x18) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:58 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r5) 22:34:58 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) 22:34:58 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r3, &(0x7f00000005c0), 0x8) 22:34:58 executing program 1: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x16}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x24048010) 22:34:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:34:58 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) sendmsg$NL80211_CMD_UPDATE_FT_IES(r5, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0xbc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_IE={0x81, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x84, 0x3}}, @ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0xf, {0x2, 0x1, [@not_ext={{}, @broadcast, 0x800, "", 0x1b}]}}, @chsw_timing={0x68, 0x4, {0x9, 0x64c}}, @mesh_config={0x71, 0x7, {0x17, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x9}}, @perr={0x84, 0x15, {0x6, 0x1, [@ext={{}, @broadcast, 0x7, @device_b, 0x14}]}}, @dsss={0x3, 0x1, 0xc}, @peer_mgmt={0x75, 0x18, {0x1, 0xfbff, @val=0x81, @val=0x3, @val="9461f7bba322ef76450a2580545a8777"}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x3, 0x0, {0x6, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x800, 0x3f}}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:34:58 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580), 0x1) 22:34:58 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) pselect6(0x40, &(0x7f0000000680)={0x2, 0x4, 0x9, 0x6, 0x9, 0x0, 0xffffffff, 0x8}, &(0x7f00000006c0)={0x9, 0x1, 0xa8db, 0x9, 0xf, 0x5, 0x1f, 0xe5b}, &(0x7f0000000700)={0x2df, 0x0, 0x4, 0x1f, 0x7, 0x6, 0x5, 0x1000}, &(0x7f0000000740)={0x0, 0x989680}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x73]}, 0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:08 executing program 1: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x24048010) 22:35:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r5) 22:35:08 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:08 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:08 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r2, 0x1) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:35:08 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580), 0x1) 22:35:08 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:35:08 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x26}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r3, &(0x7f00000005c0), 0x8) 22:35:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000500)={{r4}, 0x81, 0x1000, 0x9eb}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r5) 22:35:08 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:35:08 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 22:35:08 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000500)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:08 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580), 0x1) 22:35:08 executing program 1: sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) 22:35:08 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, r2, 0x0) 22:35:08 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) clock_gettime(0x4, &(0x7f00000004c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) socket$unix(0x1, 0x5, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r4) 22:35:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000580)=r3, 0x1) 22:35:19 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:35:19 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:19 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) clock_gettime(0x3, &(0x7f0000000480)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:19 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 22:35:19 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 22:35:19 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 22:35:19 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:19 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) clock_gettime(0x5, &(0x7f0000000440)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:19 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r1, &(0x7f00000005c0), 0x8) 22:35:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000580)=r3, 0x1) [ 196.026043] Bluetooth: hci2: command 0x0406 tx timeout [ 196.026418] Bluetooth: hci4: command 0x0406 tx timeout [ 196.026915] Bluetooth: hci6: command 0x0406 tx timeout [ 196.027882] Bluetooth: hci5: command 0x0406 tx timeout [ 196.028525] Bluetooth: hci7: command 0x0406 tx timeout [ 196.029341] Bluetooth: hci0: command 0x0406 tx timeout [ 196.030228] Bluetooth: hci1: command 0x0406 tx timeout [ 196.030845] Bluetooth: hci3: command 0x0406 tx timeout 22:35:29 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r2, &(0x7f00000005c0), 0x8) 22:35:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:29 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x36, &(0x7f0000000400)=""/102, &(0x7f0000000480)=0x66) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000580)=r3, 0x1) 22:35:29 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000400)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:29 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:35:29 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x154, r3, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_IE={0x104, 0x2a, [@tim={0x5, 0xf6, {0x0, 0xf8, 0x3, "01dbe2e53b1384facab1ece4a08bd9953ece851711abaea63caae543f95e3ccac9ff92056e8e9b2335d8e42ec24bfd13516f3743b860abc1d53b7f23fc8711c7d6948e4b16a3d0903097e25a0204cc75ea5958eaf79c0c1b8049666d29b639ecfd0f914a3a18d7cf7662c679fa221cc770780eefea72d1a79e9c679095dc0b2ff64e96113eb1fa55b24c6f3ac1b0fde73bffd7bfb154373240870c215737385b3ed73fd5fa85a7bf06382454ee4f23898f4c69e3afa93d113945a76fca33290b8f76febd6372b7208e5c9aee443ac38c4c2f3ae349af5845507a958f5e123b4135f1bffa61d56a0924bde9c5888744236b2365"}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa}]}, 0x154}, 0x1, 0x0, 0x0, 0x80c1}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r4) 22:35:29 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:29 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) clock_gettime(0x5, &(0x7f00000003c0)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:29 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) 22:35:29 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r3) 22:35:29 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) openat$cgroup_freezer_state(r1, &(0x7f00000003c0), 0x2, 0x0) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) 22:35:29 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:29 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) sched_rr_get_interval(0x0, &(0x7f0000000380)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:29 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) 22:35:40 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x600ae845721e9f46}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r3) 22:35:40 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, r4, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8000, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040090}, 0xc000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:40 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) pselect6(0x40, &(0x7f0000000200)={0x29, 0x5, 0x70d8, 0x7, 0x4, 0xff, 0x1, 0x10001}, &(0x7f0000000240)={0x3, 0xe3c, 0x7f, 0xffffffffffffff81, 0x81, 0xc28, 0x6, 0xffff}, &(0x7f0000000280)={0x80000000, 0x3800, 0x100, 0xfffffffffffffffd, 0x0, 0x5, 0x3, 0x1}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:40 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 22:35:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x9, 0x1f, 0x5, 0x7f, 0x0, 0x7, 0xc0, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x100, 0x1, 0x1, 0x0, 0x9, 0x7f, 0x401, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xb, r2, 0x5) r3 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000580)=r4, 0x1) 22:35:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:40 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:35:40 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:40 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:35:40 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) pselect6(0x40, &(0x7f0000000080)={0x9, 0x32c, 0x7, 0x80, 0x3, 0x1, 0x1}, &(0x7f00000000c0)={0xcf6d, 0x3, 0x7, 0x1, 0x4, 0x40, 0x7, 0xb3f5380000000000}, &(0x7f0000000100)={0x7ff, 0x3, 0x8, 0xca1e, 0x8, 0x800, 0x2, 0x6}, &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x7]}, 0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:40 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 22:35:40 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xff, 0x1, 0x4, 0x7, 0x0, 0x1000, 0x40000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000300), 0xc}, 0xa001, 0x6, 0x0, 0x6, 0x80000001, 0x7, 0x1, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x2) r2 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000580)=r3, 0x1) 22:35:40 executing program 6: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:40 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008004}, 0x8084) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:49 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) clock_gettime(0x1, &(0x7f0000000040)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:49 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:35:49 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000740)={0x0, {{0x2, 0x4e22, @private=0xa010102}}}, 0x88) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:35:49 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:35:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz1\x00', 0x1ff) r2 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000580)=r3, 0x1) 22:35:49 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:49 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:49 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:35:49 executing program 3: clock_gettime(0x7, &(0x7f0000000000)) connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:49 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:35:49 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x402103, 0x0) r2 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4, 0x0, r1}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000580)=r3, 0x1) 22:35:49 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:49 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:35:50 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:50 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:50 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:59 executing program 3: connect$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x2, 0x4e23, @multicast1}, 0x10) 22:35:59 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x5, 0x3, 0x1, 0x80, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100)}, 0x4080e, 0x3, 0xffffffc0, 0x7, 0x5, 0xdd, 0x80, 0x0, 0x3, 0x0, 0x8}, r0, 0x7, 0xffffffffffffffff, 0x3) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:35:59 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:35:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:35:59 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:59 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:35:59 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:35:59 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x3, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:35:59 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:35:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:35:59 executing program 3: connect$inet(0xffffffffffffffff, 0x0, 0x0) 22:36:08 executing program 1: accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:08 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:36:08 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:08 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x1f, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:08 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$rfkill(r0, &(0x7f00000005c0), 0x8) 22:36:08 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:08 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:08 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:08 executing program 6: openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000005c0), 0x8) 22:36:09 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x3cc5a000) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:09 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:09 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x2, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:09 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:09 executing program 6: openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000005c0), 0x8) 22:36:09 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:09 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:09 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x26, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:19 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:19 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:19 executing program 6: openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$rfkill(0xffffffffffffffff, &(0x7f00000005c0), 0x8) 22:36:19 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:19 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:19 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20050010}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r7}) 22:36:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:19 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:19 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:19 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:19 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f75bca4, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:19 executing program 6: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 22:36:19 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:19 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:36:19 executing program 1: perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:19 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:19 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:28 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) 22:36:28 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r5}) 22:36:28 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:28 executing program 7: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:28 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:28 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0xea, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:28 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:28 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:28 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x4d, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:28 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) 22:36:37 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) 22:36:37 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r5}) 22:36:37 executing program 7: r0 = io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:37 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r1 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000580)=r2, 0x1) 22:36:37 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:36:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:37 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:37 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:37 executing program 7: r0 = io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:45 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x100280, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r5}) 22:36:45 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) 22:36:45 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:36:45 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:36:45 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:45 executing program 7: r0 = io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:45 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:45 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:36:45 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:46 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:36:46 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) 22:36:46 executing program 7: r0 = io_uring_setup(0x1018, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:46 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:46 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r3 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) syz_genetlink_get_family_id$gtp(&(0x7f00000005c0), r2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r5}) 22:36:46 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:46 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) 22:36:46 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:55 executing program 2: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:36:55 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:36:55 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:55 executing program 7: r0 = io_uring_setup(0x1018, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:36:55 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:36:55 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) 22:36:55 executing program 7: r0 = io_uring_setup(0x1018, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:36:55 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:36:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:55 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:36:55 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:36:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:36:56 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:05 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:05 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:05 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:05 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x76d7ec05e5a4228b}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:05 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:05 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:05 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:05 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:05 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:05 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:13 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1e4}) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:13 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:13 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:13 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:13 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:13 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:13 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:14 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:14 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:14 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:14 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:14 executing program 6: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:14 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:14 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:14 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:14 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:14 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:23 executing program 6: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:23 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:23 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:23 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:23 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:23 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) [ 317.183483] Zero length message leads to an empty skb 22:37:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:23 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:23 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:23 executing program 6: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:32 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:32 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x0, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:32 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:32 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:32 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:32 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:32 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x70, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x81, 0x32}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xae8c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x488c0) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:32 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:32 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:32 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x0, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:32 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:32 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:32 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:32 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:32 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:42 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:42 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x0, 0x1ab) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:42 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:42 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580)=r1, 0x1) 22:37:42 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:42 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa4, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x68}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x3, 0x4}, {0x7, 0x1}, {0x3, 0x4}, {0x3f, 0x2}, {0x3, 0x5}, {0xfd, 0x3}, {0x98, 0x4}, {0x1f, 0x3}, {0x0, 0x4}, {0x29, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x8, 0x6}, {0x4}, {0x6, 0x3}, {0x60, 0x3}], "7d9011b049969642"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x7a, 0x4}, {0x3, 0x3}, {0x3f}, {0x0, 0x3}, {0xf7, 0x4}, {0x0, 0x1}], "efede2d12e70b8f8"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x5, 0x5}, {0xd, 0x2}, {0x1}, {0x7, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x7}, {0x81, 0x7}, {0x0, 0x3}, {0xfc, 0x7}, {0x5, 0x1}, {0x57, 0x2}, {0xff, 0x4}, {0x48, 0x7}, {0x80, 0x5}, {0x3f}, {0x7, 0x6}, {0xf9, 0x3}, {0x9, 0x7}, {0x5, 0x5}, {0x80, 0x3}], "b03b185ca5ee24ac"}}]}, 0xa4}}, 0xed9ab3788ac7bd41) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:42 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:42 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:42 executing program 7: io_uring_setup(0x1018, &(0x7f00000004c0)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000580)=r0, 0x1) 22:37:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:42 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) 22:37:42 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:42 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:42 executing program 7: io_uring_setup(0x1018, &(0x7f00000004c0)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000580)=r0, 0x1) 22:37:42 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:52 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:52 executing program 7: io_uring_setup(0x1018, &(0x7f00000004c0)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000580)=r0, 0x1) 22:37:52 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 22:37:52 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x82}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8000}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffbd56}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9ca}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x1, 0x0, 0xfff, 0xb5]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa20}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3f, 0x9]}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x550}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x200, 0x9]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffe00}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:52 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:52 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:52 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) socket$inet(0x2, 0x4, 0x2) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:37:53 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:37:53 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 22:37:53 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:53 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 22:37:53 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x400c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:37:53 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:37:53 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:37:53 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:37:53 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 22:38:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:02 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8035}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x884c}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x17}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x7ff9}, @device_a, @broadcast}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:02 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000d80), 0x0, 0x0) 22:38:02 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:02 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) socket$inet(0x2, 0x4, 0x2) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:02 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:38:02 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 22:38:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:02 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:38:02 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:02 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:02 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:10 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 22:38:10 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:10 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) socket$inet(0x2, 0x4, 0x2) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:10 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:38:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:10 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:10 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580), 0x1) 22:38:10 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:10 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:38:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:10 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:10 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:19 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580), 0x1) 22:38:19 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:38:19 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:38:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) 22:38:19 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:19 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:19 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) 22:38:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:19 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:19 executing program 7: r0 = io_uring_setup(0x1018, &(0x7f00000004c0)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000580), 0x1) 22:38:19 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:19 executing program 5: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1efd89ac4a3eea9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:38:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9df}, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) 22:38:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) [ 373.039492] kmemleak: Found object by alias at 0x607f1a63d18c [ 373.039525] CPU: 0 UID: 0 PID: 5370 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 373.039575] Tainted: [W]=WARN [ 373.039583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 373.039595] Call Trace: [ 373.039603] [ 373.039612] dump_stack_lvl+0xca/0x120 [ 373.039655] __lookup_object+0x94/0xb0 [ 373.039687] delete_object_full+0x27/0x70 [ 373.039719] free_percpu+0x30/0x1160 [ 373.039750] ? arch_uprobe_clear_state+0x16/0x140 [ 373.039788] futex_hash_free+0x38/0xc0 [ 373.039814] mmput+0x2d3/0x390 [ 373.039850] do_exit+0x79d/0x2970 [ 373.039879] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 373.039907] ? __pfx_do_exit+0x10/0x10 [ 373.039943] do_group_exit+0xd3/0x2a0 [ 373.039972] get_signal+0x2315/0x2340 [ 373.040026] ? __pfx_get_signal+0x10/0x10 [ 373.040058] ? do_futex+0x135/0x370 [ 373.040085] ? __pfx_do_futex+0x10/0x10 [ 373.040114] arch_do_signal_or_restart+0x80/0x790 [ 373.040148] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.040180] ? __x64_sys_futex+0x1c9/0x4d0 [ 373.040204] ? __x64_sys_futex+0x1d2/0x4d0 [ 373.040232] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 373.040256] ? __pfx___x64_sys_futex+0x10/0x10 [ 373.040282] ? xfd_validate_state+0x55/0x180 [ 373.040313] ? kcov_ioctl+0x386/0x6c0 [ 373.040346] exit_to_user_mode_loop+0x8b/0x110 [ 373.040371] do_syscall_64+0x2f7/0x360 [ 373.040395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.040418] RIP: 0033:0x7f3972c0ab19 [ 373.040435] Code: Unable to access opcode bytes at 0x7f3972c0aaef. [ 373.040444] RSP: 002b:00007f397015f218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.040467] RAX: fffffffffffffe00 RBX: 00007f3972d1e028 RCX: 00007f3972c0ab19 [ 373.040482] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3972d1e028 [ 373.040496] RBP: 00007f3972d1e020 R08: 0000000000000000 R09: 0000000000000000 [ 373.040509] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3972d1e02c [ 373.040522] R13: 00007fffbff7197f R14: 00007f397015f300 R15: 0000000000022000 [ 373.040553] [ 373.040560] kmemleak: Object (percpu) 0x607f1a63d188 (size 8): [ 373.040573] kmemleak: comm "syz-executor.7", pid 5386, jiffies 4295039866 [ 373.040587] kmemleak: min_count = 1 [ 373.040595] kmemleak: count = 0 [ 373.040602] kmemleak: flags = 0x21 [ 373.040609] kmemleak: checksum = 0 [ 373.040616] kmemleak: backtrace: [ 373.040623] pcpu_alloc_noprof+0x87a/0x1170 [ 373.040653] percpu_ref_init+0x37/0x400 [ 373.040672] io_uring_setup+0x44c/0x2000 [ 373.040693] __x64_sys_io_uring_setup+0xc8/0x170 [ 373.040716] do_syscall_64+0xbf/0x360 [ 373.040734] entry_SYSCALL_64_after_hwframe+0x77/0x7f 22:38:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:19 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:19 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:19 executing program 3: socketpair(0x23, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:28 executing program 3: sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:28 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 22:38:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:28 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:38:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 22:38:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) 22:38:37 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:38:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:37 executing program 3: sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:37 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:37 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x1, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:37 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:37 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x5, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:37 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) 22:38:37 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:47 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:38:47 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) 22:38:47 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:47 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:47 executing program 3: sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:38:47 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) 22:38:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0xf8b, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:38:47 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x0, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:47 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:47 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x800, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) [ 400.636842] kmemleak: Found object by alias at 0x607f1a63d18c [ 400.636873] CPU: 0 UID: 0 PID: 5510 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 400.636907] Tainted: [W]=WARN [ 400.636914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 400.636927] Call Trace: [ 400.636933] [ 400.636942] dump_stack_lvl+0xca/0x120 [ 400.636992] __lookup_object+0x94/0xb0 [ 400.637024] delete_object_full+0x27/0x70 [ 400.637055] free_percpu+0x30/0x1160 [ 400.637086] ? arch_uprobe_clear_state+0x16/0x140 [ 400.637127] futex_hash_free+0x38/0xc0 [ 400.637152] mmput+0x2d3/0x390 [ 400.637187] do_exit+0x79d/0x2970 [ 400.637212] ? lock_release+0xc8/0x290 [ 400.637243] ? __pfx_do_exit+0x10/0x10 [ 400.637269] ? find_held_lock+0x2b/0x80 [ 400.637301] ? get_signal+0x835/0x2340 [ 400.637338] do_group_exit+0xd3/0x2a0 [ 400.637366] get_signal+0x2315/0x2340 [ 400.637409] ? __pfx_get_signal+0x10/0x10 [ 400.637440] ? do_futex+0x135/0x370 [ 400.637465] ? __pfx_do_futex+0x10/0x10 [ 400.637494] arch_do_signal_or_restart+0x80/0x790 [ 400.637527] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.637558] ? __x64_sys_futex+0x1c9/0x4d0 [ 400.637581] ? __x64_sys_futex+0x1d2/0x4d0 [ 400.637606] ? exc_page_fault+0xb0/0x180 [ 400.637639] ? __pfx___x64_sys_futex+0x10/0x10 [ 400.637664] ? xfd_validate_state+0x55/0x180 [ 400.637703] exit_to_user_mode_loop+0x8b/0x110 [ 400.637727] do_syscall_64+0x2f7/0x360 [ 400.637750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.637772] RIP: 0033:0x7f3972c0ab19 [ 400.637788] Code: Unable to access opcode bytes at 0x7f3972c0aaef. [ 400.637798] RSP: 002b:00007f3970180218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 400.637819] RAX: fffffffffffffe00 RBX: 00007f3972d1df68 RCX: 00007f3972c0ab19 [ 400.637833] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3972d1df68 [ 400.637846] RBP: 00007f3972d1df60 R08: 0000000000000000 R09: 0000000000000000 [ 400.637859] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3972d1df6c [ 400.637872] R13: 00007fffbff7197f R14: 00007f3970180300 R15: 0000000000022000 [ 400.637901] [ 400.637908] kmemleak: Object (percpu) 0x607f1a63d188 (size 8): [ 400.637920] kmemleak: comm "syz-executor.4", pid 5523, jiffies 4295067461 [ 400.637933] kmemleak: min_count = 1 [ 400.637940] kmemleak: count = 0 [ 400.637947] kmemleak: flags = 0x21 [ 400.637954] kmemleak: checksum = 0 [ 400.637961] kmemleak: backtrace: [ 400.637967] pcpu_alloc_noprof+0x87a/0x1170 [ 400.637996] percpu_ref_init+0x37/0x400 [ 400.638015] io_uring_setup+0x44c/0x2000 [ 400.638037] __x64_sys_io_uring_setup+0xc8/0x170 [ 400.638058] do_syscall_64+0xbf/0x360 [ 400.638076] entry_SYSCALL_64_after_hwframe+0x77/0x7f 22:38:47 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) 22:38:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:38:47 executing program 3: socketpair(0x0, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:57 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:38:57 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) 22:38:57 executing program 3: socketpair(0x0, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:57 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x0, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:57 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:38:57 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x0, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:38:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:38:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:38:57 executing program 3: socketpair(0x0, 0x80000, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:38:57 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:38:57 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:38:57 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) 22:38:57 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x0, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:06 executing program 3: socketpair(0x23, 0x0, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:06 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:39:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:39:06 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x0, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 22:39:06 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:39:06 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:39:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) 22:39:06 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) 22:39:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) 22:39:06 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x0, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:06 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:39:06 executing program 3: socketpair(0x23, 0x0, 0x347c4d7d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:39:07 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:39:15 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:15 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:39:15 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:15 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:15 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) 22:39:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) 22:39:15 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) 22:39:15 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:15 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:15 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:15 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 22:39:15 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:39:15 executing program 4: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:15 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:24 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:39:24 executing program 4: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:24 executing program 3: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 22:39:24 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:24 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:39:24 executing program 4: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:24 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) 22:39:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22:39:24 executing program 3: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:33 executing program 4: io_uring_setup(0x1018, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:33 executing program 3: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:33 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) 22:39:33 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:33 executing program 7: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:33 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:39:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:39:33 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:33 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:33 executing program 4: io_uring_setup(0x1018, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:39:33 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) 22:39:33 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:33 executing program 7: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:33 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:39:33 executing program 7: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:33 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:33 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 22:39:33 executing program 4: io_uring_setup(0x1018, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:33 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 22:39:41 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:41 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:41 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:41 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:39:41 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:41 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 22:39:41 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:41 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:42 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0xa9ca, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) 22:39:42 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:42 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:39:42 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:51 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:39:51 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:51 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:51 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)) 22:39:51 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:51 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:39:51 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:51 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:39:51 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:51 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) 22:39:51 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:39:51 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:51 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:39:51 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:51 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:39:51 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:39:51 executing program 1: socketpair(0x23, 0x0, 0x0, 0x0) 22:40:00 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:00 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:00 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) 22:40:00 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:00 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:40:00 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:40:00 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:40:00 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:00 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:00 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:00 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, 0x1e4}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:40:00 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:00 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:11 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:11 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:11 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:11 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:40:11 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:40:11 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:40:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:11 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:11 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:40:11 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 22:40:11 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:11 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:11 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:40:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 22:40:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:20 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000540), 0x240000, 0x0) 22:40:20 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:20 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:20 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:40:20 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) socketpair(0x22, 0x1, 0x5, &(0x7f0000000780)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 22:40:20 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:20 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) 22:40:20 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:40:20 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:20 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:20 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) 22:40:20 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:20 executing program 6: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:29 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:29 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:40:29 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:29 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x240000, 0x0) 22:40:29 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:29 executing program 6: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:29 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:29 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:30 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:30 executing program 6: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:30 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:40:30 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:30 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:30 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r2}) 22:40:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:30 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:38 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:38 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:38 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:38 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:38 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:38 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:40:38 executing program 6: io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:38 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:40:47 executing program 6: io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:47 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:47 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:47 executing program 4: io_uring_setup(0x1018, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x3, 0x1e4}) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 22:40:47 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:47 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:40:47 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:47 executing program 6: io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:47 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:47 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 22:40:47 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:47 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:47 executing program 0: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:40:47 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:47 executing program 6: io_uring_setup(0x5d99, 0x0) 22:40:47 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:40:47 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:47 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:47 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:47 executing program 6: io_uring_setup(0x5d99, 0x0) 22:40:48 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:48 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:40:48 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:48 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:48 executing program 4: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x1000) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:48 executing program 2: socketpair(0x23, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:48 executing program 6: io_uring_setup(0x5d99, 0x0) [ 521.528284] kmemleak: Found object by alias at 0x607f1a63d18c [ 521.528305] CPU: 0 UID: 0 PID: 6324 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 521.528324] Tainted: [W]=WARN [ 521.528327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 521.528335] Call Trace: [ 521.528339] [ 521.528344] dump_stack_lvl+0xca/0x120 [ 521.528370] __lookup_object+0x94/0xb0 [ 521.528387] delete_object_full+0x27/0x70 [ 521.528404] free_percpu+0x30/0x1160 [ 521.528421] ? arch_uprobe_clear_state+0x16/0x140 [ 521.528441] futex_hash_free+0x38/0xc0 [ 521.528456] mmput+0x2d3/0x390 [ 521.528476] do_exit+0x79d/0x2970 [ 521.528490] ? signal_wake_up_state+0x85/0x120 [ 521.528506] ? zap_other_threads+0x2b9/0x3a0 [ 521.528522] ? __pfx_do_exit+0x10/0x10 [ 521.528535] ? do_group_exit+0x1c3/0x2a0 [ 521.528549] ? lock_release+0xc8/0x290 [ 521.528567] do_group_exit+0xd3/0x2a0 [ 521.528582] __x64_sys_exit_group+0x3e/0x50 [ 521.528596] x64_sys_call+0x18c5/0x18d0 [ 521.528612] do_syscall_64+0xbf/0x360 [ 521.528625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.528636] RIP: 0033:0x7f3972c0ab19 [ 521.528645] Code: Unable to access opcode bytes at 0x7f3972c0aaef. [ 521.528650] RSP: 002b:00007fffbff71ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 521.528662] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3972c0ab19 [ 521.528670] RDX: 00007f3972bbd72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 521.528677] RBP: 0000000000000000 R08: 0000001b2d322bd8 R09: 0000000000000000 [ 521.528684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.528691] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbff71c90 [ 521.528706] [ 521.528710] kmemleak: Object (percpu) 0x607f1a63d188 (size 8): [ 521.528716] kmemleak: comm "syz-executor.4", pid 6341, jiffies 4295188358 [ 521.528723] kmemleak: min_count = 1 [ 521.528727] kmemleak: count = 0 [ 521.528731] kmemleak: flags = 0x21 [ 521.528735] kmemleak: checksum = 0 [ 521.528738] kmemleak: backtrace: [ 521.528742] pcpu_alloc_noprof+0x87a/0x1170 [ 521.528758] percpu_ref_init+0x37/0x400 [ 521.528773] io_uring_setup+0x44c/0x2000 [ 521.528785] __x64_sys_io_uring_setup+0xc8/0x170 [ 521.528797] do_syscall_64+0xbf/0x360 [ 521.528806] entry_SYSCALL_64_after_hwframe+0x77/0x7f 22:40:48 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:57 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20, 0x3, 0x2dc}) 22:40:57 executing program 0: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:40:57 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:40:57 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:57 executing program 2: socketpair(0x23, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:57 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:57 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:40:57 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:40:57 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:40:57 executing program 2: socketpair(0x23, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:40:57 executing program 4: io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:41:06 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20, 0x3, 0x2dc}) 22:41:06 executing program 0: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:41:06 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:41:06 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:41:06 executing program 4: io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:41:06 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:06 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) 22:41:06 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 22:41:06 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:41:06 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) 22:41:06 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r1}) 22:41:15 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x2dc}) 22:41:15 executing program 4: io_uring_setup(0x0, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc}) 22:41:15 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)) 22:41:15 executing program 0: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:15 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1000) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:15 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) 22:41:15 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:15 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r1) 22:41:15 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x2dc}) 22:41:15 executing program 4: io_uring_setup(0x5d99, 0x0) 22:41:15 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x0, 0x1ab) 22:41:15 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) 22:41:15 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:15 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)) 22:41:24 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x0, 0x0) 22:41:24 executing program 4: io_uring_setup(0x5d99, 0x0) 22:41:24 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:41:24 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x2dc}) 22:41:24 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(0x0, r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:24 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)) 22:41:24 executing program 0: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:24 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:24 executing program 4: io_uring_setup(0x5d99, 0x0) 22:41:24 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20, 0x3, 0x2dc}) 22:41:24 executing program 7: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 22:41:24 executing program 1: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:41:24 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20, 0x0, 0x2dc}) 22:41:24 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x2dc}) 22:41:24 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:24 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:24 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:24 executing program 0: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:24 executing program 6: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20}) 22:41:24 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x2dc}) 22:41:24 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0x2dc}) 22:41:32 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:32 executing program 1: socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:41:32 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x0, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:32 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20, 0x0, 0x2dc}) 22:41:32 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:41:32 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:32 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) 22:41:32 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:32 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:32 executing program 4: io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0x0, 0x20}) 22:41:33 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:41:42 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:41:42 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x1ab) 22:41:42 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x0, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:42 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:42 executing program 1: socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:41:42 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:42 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:42 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:41:42 executing program 1: socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:41:42 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:41:42 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:42 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ab) 22:41:42 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:42 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:42 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:42 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:42 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:41:42 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x0, 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:42 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r3}) 22:41:42 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) 22:41:50 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ab) 22:41:50 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:41:50 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:41:50 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) 22:41:50 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:41:50 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:41:50 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) 22:41:50 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:41:51 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) [ 589.184445] ------------[ cut here ]------------ [ 589.185582] WARNING: io_uring/io_uring.c:3040 at io_ring_exit_work+0xc86/0xf60, CPU#1: kworker/u9:1/34 [ 589.187281] Modules linked in: [ 589.187950] CPU: 1 UID: 0 PID: 34 Comm: kworker/u9:1 Tainted: G W 6.17.0-rc4-next-20250901 #1 PREEMPT(voluntary) [ 589.190064] Tainted: [W]=WARN [ 589.190631] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 589.192097] Workqueue: iou_exit io_ring_exit_work [ 589.192968] RIP: 0010:io_ring_exit_work+0xc86/0xf60 [ 589.193886] Code: 65 48 2b 05 94 33 3e 05 0f 85 55 01 00 00 48 81 c4 40 01 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 70 0a 78 02 e8 1b aa 2d ff 90 <0f> 0b 90 48 c7 44 24 08 60 ea 00 00 e9 13 f7 ff ff e8 04 aa 2d ff [ 589.202506] RSP: 0018:ffff888009a97b08 EFLAGS: 00010293 [ 589.203486] RAX: 0000000000000000 RBX: ffff88803c5ca6c8 RCX: ffffffff824643b1 [ 589.204766] RDX: ffff888009a7b700 RSI: ffffffff82464c95 RDI: 0000000000000007 [ 589.206034] RBP: ffff88803c5ca000 R08: 0000000000000001 R09: ffffed1001352f4a [ 589.207341] R10: ffffffffffffffe8 R11: 0000000000000000 R12: dffffc0000000000 [ 589.208609] R13: ffffffffffffffe8 R14: ffff88803c5ca03f R15: ffff88803c5ca040 [ 589.209894] FS: 0000000000000000(0000) GS:ffff8880e56d8000(0000) knlGS:0000000000000000 [ 589.211331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.212396] CR2: 000055ba4f69e618 CR3: 000000000a698000 CR4: 0000000000350ef0 [ 589.213663] Call Trace: [ 589.214173] [ 589.214585] ? __lock_acquire+0xc65/0x1b70 [ 589.215374] ? __pfx_io_ring_exit_work+0x10/0x10 [ 589.216236] ? finish_task_switch.isra.0+0x201/0x840 [ 589.217177] ? lock_acquire+0x15e/0x2f0 [ 589.217887] ? process_one_work+0x857/0x19c0 [ 589.218730] ? lock_release+0xc8/0x290 [ 589.219464] process_one_work+0x8e1/0x19c0 [ 589.220261] ? __pfx_process_one_work+0x10/0x10 [ 589.221121] ? move_linked_works+0x172/0x270 [ 589.221920] ? assign_work+0x196/0x240 [ 589.222668] worker_thread+0x67e/0xe90 [ 589.223408] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 589.224369] ? __pfx_worker_thread+0x10/0x10 [ 589.225198] kthread+0x3c8/0x740 [ 589.225806] ? __pfx_kthread+0x10/0x10 [ 589.226540] ? ret_from_fork+0x23/0x430 [ 589.227305] ? lock_release+0xc8/0x290 [ 589.228027] ? __pfx_kthread+0x10/0x10 [ 589.228726] ret_from_fork+0x34b/0x430 [ 589.229486] ? __pfx_kthread+0x10/0x10 [ 589.230247] ret_from_fork_asm+0x1a/0x30 [ 589.231041] [ 589.233727] irq event stamp: 483471 [ 589.235819] hardirqs last enabled at (483765): [] __up_console_sem+0x78/0x80 [ 589.237409] hardirqs last disabled at (483774): [] __up_console_sem+0x5d/0x80 [ 589.238959] softirqs last enabled at (483762): [] handle_softirqs+0x50c/0x770 [ 589.240531] softirqs last disabled at (483479): [] __irq_exit_rcu+0xc4/0x100 [ 589.242082] ---[ end trace 0000000000000000 ]--- 22:42:00 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:42:00 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) 22:42:00 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) 22:42:00 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x0, 0x1, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:42:00 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x1ab) 22:42:00 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:42:00 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:42:00 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:42:00 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) 22:42:00 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:42:00 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:42:00 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:42:00 executing program 3: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 22:42:00 executing program 6: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r1 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) 22:42:00 executing program 5: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x0, @loopback}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r0}) 22:42:00 executing program 7: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x1000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) 22:42:00 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/module/ehci_pci', 0x101000, 0x1ab) 22:42:00 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x10805) accept$inet(r0, 0x0, &(0x7f0000000180)) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x4, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r1, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x88}}, 0x1000) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x82402, 0x0) r2 = socket$inet(0x2, 0x4, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'ip6erspan0\x00', 0x4}, 0x18) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000500)={0x9, 0x9c, "c95c44b36c575c8993b9384457cb10ff572bfb3f40bd13f85dd5aa88806c1b87099e354c22109e36c222c0057671e55d2c0a5517c30447d778ef5ba74f715bd2dca21dfda9faed3c407a6d4d2b86bcee7666ca4efebeaa5634354fdbd6007c37ff6d84814a1f0d7fc38d06c58096b3d9c77f0eaae3a83ac5bba26fdf73f9c3367fe90ed7ed16164aa680a8cd9f336e7c0f3445cb451a8a2293a3badb"}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/module/blk_cgroup', 0x240001, 0x100) io_uring_setup(0x5d99, &(0x7f00000009c0)={0x0, 0xbaa1, 0x20, 0x3, 0x2dc, 0x0, r4}) 22:42:00 executing program 4: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) 22:42:00 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x0, 0x5, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) VM DIAGNOSIS: 22:41:56 Registers: info registers vcpu 0 RAX=00000000002dd867 RBX=0000000000000000 RCX=ffffffff84bbe5f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c8304 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643b450 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bbd31e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d8000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2c8218d220 CR3=0000000016365000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=2035353a31343a323220312020706553 XMM01=5d3836393239312e39383520205b203a XMM02=775f746978655f676e69725f6f693a30 XMM03=2e39383520205b203a6c656e72656b20 XMM04=32312e3120534f4942202c2936393931 XMM05=20435020647261646e61745320554d45 XMM06=205d3133363039312e39383520205b20 XMM07=732035353a31343a3232203120207065 XMM08=2e726f7475636578652d7a7973223d6d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e5105 RDI=ffffffff88729280 RBP=ffffffff88729240 RSP=ffff888009a973d0 R8 =0000000000000000 R9 =ffffed1001e8b046 R10=000000000000005d R11=0000000000000001 R12=000000000000005d R13=0000000000000010 R14=ffffffff88729240 R15=ffffffff828e50f0 RIP=ffffffff828e515d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d8000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ba4f69e618 CR3=000000000a698000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000bfe62e42fefa39ef XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000