d6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:52:31 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:31 executing program 7: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:31 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:31 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:31 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:31 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:31 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:52:46 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:52:46 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 6: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, 0x0, 0x0) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:52:46 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:52:46 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:52:46 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:01 executing program 6: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:01 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:01 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:01 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:01 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:01 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:01 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:22 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:22 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:22 executing program 5: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 7: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 6: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:53:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 7: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 6: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 7: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:35 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:47 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:47 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:47 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:47 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:47 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 19:53:47 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:47 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:47 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:58 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') 19:53:58 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 19:53:58 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:58 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:53:58 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:53:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:53:58 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 19:54:13 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:54:13 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:13 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:13 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:13 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:13 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:13 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) 19:54:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 19:54:25 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:25 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:25 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 19:54:25 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000240)='fd/3\x00') 19:54:25 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:25 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:25 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:36 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) getpid() 19:54:36 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 5: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:36 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:54:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:36 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:36 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:54:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:50 executing program 7: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:50 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:54:50 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:50 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:54:50 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:50 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:50 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:54:50 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) getpid() 19:54:50 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 6: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:04 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:55:04 executing program 1: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:55:04 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) 19:55:04 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:55:04 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') 19:55:04 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:04 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:04 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, 0x0, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:04 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:04 executing program 0: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:04 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:04 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:17 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:17 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, 0x0, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:17 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:17 executing program 6: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:17 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:17 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:17 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:17 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:18 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, 0x0, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:18 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:18 executing program 6: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:18 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:18 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:18 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:18 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:18 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:18 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:18 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:18 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:30 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:30 executing program 6: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:30 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:30 executing program 0: syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:30 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, 0x0, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:30 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:55:30 executing program 4: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:30 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:31 executing program 4: getpid() r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:31 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x0, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:41 executing program 2: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:41 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:41 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:41 executing program 6: syz_open_procfs(0x0, 0x0) 19:55:41 executing program 0: syz_open_procfs(0x0, 0x0) 19:55:41 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:41 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 19:55:41 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:41 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:41 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:42 executing program 4: getpid() prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:42 executing program 0: syz_open_procfs(0x0, 0x0) 19:55:42 executing program 6: syz_open_procfs(0x0, 0x0) 19:55:42 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') 19:55:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:42 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:42 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:42 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:42 executing program 4: getpid() prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:42 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:42 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:42 executing program 0: syz_open_procfs(0x0, 0x0) 19:55:42 executing program 6: syz_open_procfs(0x0, 0x0) 19:55:42 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:53 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:53 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:55:53 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:53 executing program 4: getpid() prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:53 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:55:53 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:55:53 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:55:53 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:55:53 executing program 6: getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:55:53 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:08 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:56:08 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:08 executing program 6: getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:56:08 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 19:56:08 executing program 4: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:56:08 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:56:08 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:08 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:08 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:08 executing program 6: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:08 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:08 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:56:08 executing program 4: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:56:08 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:08 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:08 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 19:56:08 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:56:08 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:20 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) 19:56:20 executing program 4: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:56:20 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:20 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:20 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) getpid() perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:56:20 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:56:20 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() 19:56:20 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:20 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 19:56:32 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 19:56:32 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:32 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:32 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 19:56:32 executing program 4: r0 = getpid() prlimit64(r0, 0x3, 0x0, &(0x7f0000000080)) 19:56:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:32 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) getpid() perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:56:32 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r8, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:32 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000240)='fd/3\x00') 19:56:32 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:32 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:32 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) getpid() perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:56:32 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) 19:56:32 executing program 4: r0 = getpid() prlimit64(r0, 0x3, 0x0, &(0x7f0000000080)) 19:56:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:32 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:32 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) getpid() 19:56:32 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:32 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) getpid() perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:56:44 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) getpid() 19:56:44 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:44 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:44 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 19:56:44 executing program 4: r0 = getpid() prlimit64(r0, 0x3, 0x0, &(0x7f0000000080)) 19:56:44 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:56:44 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:44 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:44 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) 19:56:44 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) getpid() connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:44 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:44 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:44 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)) 19:56:56 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:56 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) 19:56:56 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:56 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') 19:56:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:56 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:56:56 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:56 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000240)='fd/3\x00') 19:56:56 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:56:56 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) 19:56:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:56 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:56 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:56 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) getpid() 19:56:56 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:56 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:56:56 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) 19:56:56 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:56:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:56:56 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) getpid() connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:56:56 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) 19:56:56 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:56:56 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:08 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:08 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:08 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:08 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:08 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x0) 19:57:08 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:08 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:57:08 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:08 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:20 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x0) 19:57:20 executing program 6: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:20 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:57:20 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 6: getpid() r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:20 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 4: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x0) 19:57:20 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:57:20 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:20 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:20 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 6: getpid() prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:20 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 1: getpid() prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:20 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:20 executing program 0: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:20 executing program 6: getpid() prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:32 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:57:32 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:32 executing program 6: getpid() prlimit64(0x0, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:32 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:32 executing program 1: prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:32 executing program 0: getpid() prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:32 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:32 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:32 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:32 executing program 0: prlimit64(0x0, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:33 executing program 6: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:33 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:57:49 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:49 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:57:49 executing program 6: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:57:49 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:49 executing program 7: getpid() connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:57:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:49 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:49 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) 19:57:49 executing program 0: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 19:57:49 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:57:49 executing program 1: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 19:58:04 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:04 executing program 6: r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) 19:58:04 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:04 executing program 1: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 19:58:04 executing program 0: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 19:58:04 executing program 7: connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:58:04 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:04 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:04 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:04 executing program 0: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 19:58:04 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:04 executing program 7: connect$inet6(0xffffffffffffffff, 0x0, 0x0) 19:58:04 executing program 1: prlimit64(0x0, 0x0, 0x0, &(0x7f0000000180)) 19:58:04 executing program 6: r0 = getpid() prlimit64(r0, 0x3, 0x0, &(0x7f0000000080)) 19:58:04 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:04 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:04 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x7663}, &(0x7f0000000180)) 19:58:04 executing program 6: r0 = getpid() prlimit64(r0, 0x3, 0x0, &(0x7f0000000080)) 19:58:19 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 19:58:19 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) getpid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r5, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:19 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 6: r0 = getpid() prlimit64(r0, 0x3, 0x0, &(0x7f0000000080)) 19:58:19 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x7663}, &(0x7f0000000180)) 19:58:19 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:19 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) getpid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r5, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000080)) 19:58:19 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x7663}, &(0x7f0000000180)) 19:58:19 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000140), 0x0) 19:58:19 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:19 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:19 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r6, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x7663}, &(0x7f0000000180)) 19:58:30 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:30 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) 19:58:30 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r5, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r6, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) 19:58:30 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:30 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 19:58:30 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:30 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:30 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040), &(0x7f0000000080)) 19:58:43 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140), 0x0) 19:58:43 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:43 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:43 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x0) 19:58:43 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:43 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:43 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 19:58:55 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:55 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:55 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:55 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:55 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x0) 19:58:56 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}}, 0xc005) 19:58:56 executing program 6: r0 = getpid() prlimit64(r0, 0x3, &(0x7f0000000040)={0x0, 0x7fffffff}, 0x0) 19:58:56 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 19:58:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:56 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:56 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 6: r0 = getpid() syz_open_procfs(r0, 0x0) getpid() syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:58:56 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') 19:58:56 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) 19:58:56 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:56 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:58:56 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:58:56 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:10 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x114, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:10 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:10 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:10 executing program 7: perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:10 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:10 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:10 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:10 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:10 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:10 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:10 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:23 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:23 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:23 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') 19:59:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:23 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r4, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:23 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:23 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:23 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() 19:59:23 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') r0 = getpid() syz_open_procfs(r0, &(0x7f00000000c0)='net/netlink\x00') 19:59:23 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:59:23 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') 19:59:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:23 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:35 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() 19:59:35 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:35 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:35 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') 19:59:35 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:35 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') 19:59:35 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:35 executing program 1: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') 19:59:35 executing program 7: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 7: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 6: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') 19:59:46 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 7: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 0: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 6: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 6: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 0: syz_open_procfs(0x0, 0x0) 19:59:46 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:46 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:57 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:57 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:57 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:57 executing program 0: syz_open_procfs(0x0, 0x0) 19:59:57 executing program 7: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) r3 = getpid() prlimit64(r3, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r2, 0x0) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000240)='fd/3\x00') 19:59:57 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:58 executing program 5: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 19:59:58 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 5: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 7: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r1 = getpid() prlimit64(r1, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r2, &(0x7f0000000100)) 20:00:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 5: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 7: r0 = getpid() syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x68}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) 20:00:10 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:10 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:10 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:23 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:23 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:23 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:23 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:23 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:23 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:23 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:36 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:36 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, 0x0) getpid() r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:36 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:36 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:36 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:49 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r0, &(0x7f0000000440)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:49 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:49 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) getpid() r8 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r9, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:49 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:49 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:00:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:00:49 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:00:49 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:02 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:02 executing program 7: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:02 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:02 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:02 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:02 executing program 2: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:02 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:02 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:02 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:17 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:17 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 7: getpid() syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:17 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:17 executing program 7: getpid() syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:17 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:17 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 7: getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:17 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:30 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:30 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:30 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:30 executing program 6: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:30 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:30 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:30 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:30 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:30 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:30 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:30 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:30 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(0x0, r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:30 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:30 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:41 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:41 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:41 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:41 executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:41 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:41 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:41 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:41 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:41 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:41 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:41 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:55 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:55 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:55 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:55 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:01:55 executing program 6: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:55 executing program 6: syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:55 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 1: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') getpid() r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r1, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) 20:01:55 executing program 6: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:55 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:01:55 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:01:55 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 3082.379579] Call Trace: [ 3082.379615] [ 3082.379618] ====================================================== [ 3082.379622] WARNING: possible circular locking dependency detected [ 3082.379626] 5.17.0-rc2-next-20220204 #1 Not tainted [ 3082.379632] ------------------------------------------------------ [ 3082.379634] syz-executor.6/13456 is trying to acquire lock: [ 3082.379640] ffffffff851f5018 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x60 [ 3082.379672] [ 3082.379672] but task is already holding lock: [ 3082.379674] ffff888010082420 (&ctx->lock){....}-{2:2}, at: __perf_install_in_context+0x12d/0x310 [ 3082.379700] [ 3082.379700] which lock already depends on the new lock. [ 3082.379700] [ 3082.379703] [ 3082.379703] the existing dependency chain (in reverse order) is: [ 3082.379706] [ 3082.379706] -> #3 (&ctx->lock){....}-{2:2}: [ 3082.379719] _raw_spin_lock+0x2a/0x40 [ 3082.379730] __perf_event_task_sched_out+0x519/0x1950 [ 3082.379743] __schedule+0xead/0x2190 [ 3082.379757] schedule+0xd2/0x1f0 [ 3082.379769] futex_wait_queue+0x144/0x3b0 [ 3082.379780] futex_wait+0x2c9/0x660 [ 3082.379790] do_futex+0x2fb/0x380 [ 3082.379799] __x64_sys_futex+0x1c6/0x4c0 [ 3082.379812] do_syscall_64+0x3b/0x90 [ 3082.379829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.379841] [ 3082.379841] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 3082.379853] _raw_spin_lock_nested+0x30/0x40 [ 3082.379863] raw_spin_rq_lock_nested+0x1e/0x30 [ 3082.379880] task_fork_fair+0x63/0x4d0 [ 3082.379894] sched_post_fork+0x343/0x490 [ 3082.379904] copy_process+0x5313/0x6cb0 [ 3082.379919] kernel_clone+0xe7/0xa60 [ 3082.379934] kernel_thread+0xb5/0xf0 [ 3082.379952] rest_init+0x24/0x3d0 [ 3082.379963] start_kernel+0x484/0x4a5 [ 3082.379979] secondary_startup_64_no_verify+0xd5/0xdb [ 3082.379992] [ 3082.379992] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 3082.380005] _raw_spin_lock_irqsave+0x39/0x50 [ 3082.380015] try_to_wake_up+0xa5/0x1060 [ 3082.380024] up+0x75/0xb0 [ 3082.380032] __up_console_sem+0x6e/0x80 [ 3082.380044] console_unlock+0x53e/0xae0 [ 3082.380055] vprintk_emit+0x198/0x450 [ 3082.380067] vprintk+0x80/0x90 [ 3082.380079] _printk+0xba/0xed [ 3082.380094] regdb_fw_cb.cold+0x6c/0xa7 [ 3082.380111] request_firmware_work_func+0x12e/0x230 [ 3082.380126] process_one_work+0xa1c/0x16a0 [ 3082.380141] worker_thread+0x637/0x1260 [ 3082.380154] kthread+0x2f0/0x3a0 [ 3082.380164] ret_from_fork+0x22/0x30 [ 3082.380175] [ 3082.380175] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 3082.380188] __lock_acquire+0x2c2f/0x6120 [ 3082.380201] lock_acquire+0x1a2/0x4d0 [ 3082.380212] _raw_spin_lock_irqsave+0x39/0x50 [ 3082.380222] down_trylock+0xe/0x60 [ 3082.380230] __down_trylock_console_sem+0x3b/0xd0 [ 3082.380242] vprintk_emit+0x146/0x450 [ 3082.380255] vprintk+0x80/0x90 [ 3082.380266] _printk+0xba/0xed [ 3082.380280] show_trace_log_lvl+0x57/0x2bb [ 3082.380292] ex_handler_msr+0x311/0x3a0 [ 3082.380306] fixup_exception+0x1c7/0xc90 [ 3082.380320] exc_general_protection+0xed/0x2f0 [ 3082.380329] asm_exc_general_protection+0x1e/0x30 [ 3082.380340] x86_pmu_enable_all+0x132/0x3c0 [ 3082.380355] x86_pmu_enable+0x580/0xd90 [ 3082.380368] ctx_resched+0x2b0/0x390 [ 3082.380379] __perf_install_in_context+0x285/0x310 [ 3082.380392] remote_function+0x125/0x1b0 [ 3082.380408] generic_exec_single+0x203/0x300 [ 3082.380419] smp_call_function_single+0x189/0x460 [ 3082.380430] task_function_call+0xe5/0x170 [ 3082.380445] perf_install_in_context+0x2cb/0x550 [ 3082.380462] __do_sys_perf_event_open+0x1bf0/0x3040 [ 3082.380475] do_syscall_64+0x3b/0x90 [ 3082.380491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.380503] [ 3082.380503] other info that might help us debug this: [ 3082.380503] [ 3082.380505] Chain exists of: [ 3082.380505] (console_sem).lock --> &rq->__lock --> &ctx->lock [ 3082.380505] [ 3082.380519] Possible unsafe locking scenario: [ 3082.380519] [ 3082.380521] CPU0 CPU1 [ 3082.380523] ---- ---- [ 3082.380525] lock(&ctx->lock); [ 3082.380530] lock(&rq->__lock); [ 3082.380536] lock(&ctx->lock); [ 3082.380541] lock((console_sem).lock); [ 3082.380546] [ 3082.380546] *** DEADLOCK *** [ 3082.380546] [ 3082.380548] 4 locks held by syz-executor.6/13456: [ 3082.380554] #0: ffff888035f8bbe0 (&sig->exec_update_lock){++++}-{3:3}, at: __do_sys_perf_event_open+0x1023/0x3040 [ 3082.380583] #1: ffff8880100824b0 (&ctx->mutex){+.+.}-{3:3}, at: __do_sys_perf_event_open+0x17cd/0x3040 [ 3082.380610] #2: ffff88806ce3f020 (&cpuctx_lock){....}-{2:2}, at: __perf_install_in_context+0xf4/0x310 [ 3082.380636] #3: ffff888010082420 (&ctx->lock){....}-{2:2}, at: __perf_install_in_context+0x12d/0x310 [ 3082.380663] [ 3082.380663] stack backtrace: [ 3082.380666] CPU: 0 PID: 13456 Comm: syz-executor.6 Not tainted 5.17.0-rc2-next-20220204 #1 [ 3082.380678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 3082.380685] Call Trace: [ 3082.380688] [ 3082.380692] dump_stack_lvl+0x8b/0xb3 [ 3082.380710] check_noncircular+0x25f/0x2e0 [ 3082.380724] ? print_circular_bug+0x450/0x450 [ 3082.380737] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3082.380754] ? memcpy+0x39/0x60 [ 3082.380772] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3082.380787] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 3082.380802] ? vsnprintf+0x4ba/0x1600 [ 3082.380819] __lock_acquire+0x2c2f/0x6120 [ 3082.380835] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3082.380853] lock_acquire+0x1a2/0x4d0 [ 3082.380865] ? down_trylock+0xe/0x60 [ 3082.380875] ? lock_release+0x6f0/0x6f0 [ 3082.380889] ? perf_assign_events+0x852/0x940 [ 3082.380905] ? vprintk+0x80/0x90 [ 3082.380918] _raw_spin_lock_irqsave+0x39/0x50 [ 3082.380929] ? down_trylock+0xe/0x60 [ 3082.380938] down_trylock+0xe/0x60 [ 3082.380947] ? vprintk+0x80/0x90 [ 3082.380960] __down_trylock_console_sem+0x3b/0xd0 [ 3082.380973] vprintk_emit+0x146/0x450 [ 3082.380987] vprintk+0x80/0x90 [ 3082.381001] _printk+0xba/0xed [ 3082.381015] ? record_print_text.cold+0x16/0x16 [ 3082.381033] ? __lock_acquire+0xbac/0x6120 [ 3082.381048] show_trace_log_lvl+0x57/0x2bb [ 3082.381061] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.381076] ? bsearch+0xa2/0xc0 [ 3082.381087] ? cmp_ex_sort+0xc0/0xc0 [ 3082.381102] ? search_extable+0x7f/0xb0 [ 3082.381117] ? trim_init_extable+0x2f0/0x2f0 [ 3082.381136] ex_handler_msr+0x311/0x3a0 [ 3082.381151] fixup_exception+0x1c7/0xc90 [ 3082.381167] exc_general_protection+0xed/0x2f0 [ 3082.381181] asm_exc_general_protection+0x1e/0x30 [ 3082.381194] RIP: 0010:x86_pmu_enable_all+0x132/0x3c0 [ 3082.381210] Code: f7 d7 49 21 c7 48 89 f8 48 c1 e8 03 42 80 3c 20 00 0f 85 64 02 00 00 48 8b 9b 70 01 00 00 4c 89 fa 44 89 f8 48 c1 ea 20 89 d9 <0f> 30 0f 1f 44 00 00 e8 72 4c 42 00 e8 6d 4c 42 00 8b 1d d3 86 8b [ 3082.381221] RSP: 0018:ffff8880387ef968 EFLAGS: 00010016 [ 3082.381229] RAX: 0000000000530076 RBX: 00000000c0010200 RCX: 00000000c0010200 [ 3082.381237] RDX: 0000000000000100 RSI: ffffffff8100de26 RDI: ffff8880081c4058 [ 3082.381244] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 3082.381251] R10: ffffffff8100de15 R11: 0000000000000000 R12: dffffc0000000000 [ 3082.381258] R13: ffff88806ce21c20 R14: ffff88806ce21e20 R15: 0000010000530076 [ 3082.381266] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.381282] ? x86_pmu_enable_all+0xd6/0x3c0 [ 3082.381298] ? x86_pmu_enable_all+0xd6/0x3c0 [ 3082.381314] ? x86_pmu_start+0x1c0/0x240 [ 3082.381329] x86_pmu_enable+0x580/0xd90 [ 3082.381344] ? amd_pmu_disable_virt+0xa0/0xa0 [ 3082.381363] ctx_resched+0x2b0/0x390 [ 3082.381377] __perf_install_in_context+0x285/0x310 [ 3082.381391] ? __perf_event_enable+0x550/0x550 [ 3082.381404] remote_function+0x125/0x1b0 [ 3082.381420] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.381437] ? perf_duration_warn+0x40/0x40 [ 3082.381454] generic_exec_single+0x203/0x300 [ 3082.381467] smp_call_function_single+0x189/0x460 [ 3082.381480] ? perf_duration_warn+0x40/0x40 [ 3082.381498] ? generic_exec_single+0x300/0x300 [ 3082.381510] ? perf_duration_warn+0x40/0x40 [ 3082.381528] ? lock_is_held_type+0xd7/0x130 [ 3082.381541] ? __perf_event_enable+0x550/0x550 [ 3082.381555] task_function_call+0xe5/0x170 [ 3082.381571] ? pmu_dev_release+0x20/0x20 [ 3082.381588] ? __perf_event_enable+0x550/0x550 [ 3082.381602] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.381617] ? exclusive_event_installable+0x254/0x320 [ 3082.381634] ? lock_is_held_type+0xd7/0x130 [ 3082.381648] perf_install_in_context+0x2cb/0x550 [ 3082.381667] ? perf_group_attach+0x450/0x450 [ 3082.381685] ? lock_is_held_type+0xd7/0x130 [ 3082.381698] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.381714] ? exclusive_event_installable+0x254/0x320 [ 3082.381732] __do_sys_perf_event_open+0x1bf0/0x3040 [ 3082.381749] ? __up_read+0x192/0x710 [ 3082.381759] ? perf_remove_from_context+0x230/0x230 [ 3082.381774] ? up_write+0x460/0x460 [ 3082.381787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.381803] do_syscall_64+0x3b/0x90 [ 3082.381820] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.381833] RIP: 0033:0x7f9d0832eb19 [ 3082.381841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.381852] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.381862] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.381870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.381877] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.381884] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.381891] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.381902] [ 3082.479272] [ 3082.479519] ? x86_pmu_start+0x1c0/0x240 [ 3082.479965] x86_pmu_enable+0x580/0xd90 [ 3082.480404] ? amd_pmu_disable_virt+0xa0/0xa0 [ 3082.480890] ctx_resched+0x2b0/0x390 [ 3082.481299] __perf_install_in_context+0x285/0x310 [ 3082.481829] ? __perf_event_enable+0x550/0x550 [ 3082.482326] remote_function+0x125/0x1b0 [ 3082.482790] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.483378] ? perf_duration_warn+0x40/0x40 [ 3082.483845] generic_exec_single+0x203/0x300 [ 3082.484315] smp_call_function_single+0x189/0x460 [ 3082.484829] ? perf_duration_warn+0x40/0x40 [ 3082.485298] ? generic_exec_single+0x300/0x300 [ 3082.485784] ? perf_duration_warn+0x40/0x40 [ 3082.486249] ? lock_is_held_type+0xd7/0x130 [ 3082.486719] ? __perf_event_enable+0x550/0x550 [ 3082.487207] task_function_call+0xe5/0x170 [ 3082.487662] ? pmu_dev_release+0x20/0x20 [ 3082.488104] ? __perf_event_enable+0x550/0x550 [ 3082.488594] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.489189] ? exclusive_event_installable+0x254/0x320 [ 3082.489745] ? lock_is_held_type+0xd7/0x130 [ 3082.490216] perf_install_in_context+0x2cb/0x550 [ 3082.490740] ? perf_group_attach+0x450/0x450 [ 3082.491222] ? lock_is_held_type+0xd7/0x130 [ 3082.491682] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3082.492275] ? exclusive_event_installable+0x254/0x320 [ 3082.492839] __do_sys_perf_event_open+0x1bf0/0x3040 [ 3082.493376] ? __up_read+0x192/0x710 [ 3082.493772] ? perf_remove_from_context+0x230/0x230 [ 3082.494315] ? up_write+0x460/0x460 [ 3082.494717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.495270] do_syscall_64+0x3b/0x90 [ 3082.495675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.496222] RIP: 0033:0x7f9d0832eb19 [ 3082.496618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.498596] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.499405] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.500167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.500920] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.501683] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.502451] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.503213] [ 3082.504147] Call Trace: [ 3082.504438] [ 3082.504678] x86_pmu_stop+0x149/0x330 [ 3082.505090] x86_pmu_del+0x1be/0x610 [ 3082.505489] event_sched_out+0x2ed/0xaf0 [ 3082.505922] group_sched_out.part.0+0x115/0x360 [ 3082.506437] ctx_sched_out+0x7db/0xa90 [ 3082.506866] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.507417] ? update_curr+0x3a7/0x800 [ 3082.507835] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.508389] ? set_next_entity+0x2f6/0x570 [ 3082.508856] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.509349] __schedule+0xead/0x2190 [ 3082.509759] ? io_schedule_timeout+0x140/0x140 [ 3082.510252] ? perf_duration_warn+0x40/0x40 [ 3082.510730] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.511235] ? lock_release+0x505/0x6f0 [ 3082.511662] ? __cond_resched+0x13/0x20 [ 3082.512088] preempt_schedule_common+0x45/0xc0 [ 3082.512577] __cond_resched+0x13/0x20 [ 3082.512985] __mutex_lock+0xa3/0x1480 [ 3082.513390] ? __perf_event_enable+0x550/0x550 [ 3082.513878] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.514447] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.514980] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.515497] ? lock_release+0x505/0x6f0 [ 3082.515921] ? __up_read+0x192/0x710 [ 3082.516321] ? rwlock_bug.part.0+0x90/0x90 [ 3082.516773] ? up_write+0x460/0x460 [ 3082.517158] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.517697] ? __up_read+0x192/0x710 [ 3082.518088] ? perf_remove_from_context+0x230/0x230 [ 3082.518637] ? up_write+0x460/0x460 [ 3082.519023] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.519583] do_syscall_64+0x3b/0x90 [ 3082.519985] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.520531] RIP: 0033:0x7f9d0832eb19 [ 3082.520923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.522891] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.523718] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.524480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.525243] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.526006] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.526782] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.527549] [ 3082.539746] Call Trace: [ 3082.540050] [ 3082.540289] ? x86_pmu_start+0x1c0/0x240 [ 3082.540728] x86_pmu_enable+0x580/0xd90 [ 3082.541158] __perf_event_task_sched_in+0x5e4/0x770 [ 3082.541697] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3082.542234] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3082.542787] ? xfd_validate_state+0x59/0x180 [ 3082.543264] finish_task_switch.isra.0+0x45c/0x870 [ 3082.543795] ? __switch_to+0x5bf/0xf20 [ 3082.544221] __schedule+0x88a/0x2190 [ 3082.544630] ? io_schedule_timeout+0x140/0x140 [ 3082.545127] ? perf_duration_warn+0x40/0x40 [ 3082.545601] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.546112] ? lock_release+0x505/0x6f0 [ 3082.546556] ? __cond_resched+0x13/0x20 [ 3082.546984] preempt_schedule_common+0x45/0xc0 [ 3082.547478] __cond_resched+0x13/0x20 [ 3082.547887] __mutex_lock+0xa3/0x1480 [ 3082.548303] ? __perf_event_enable+0x550/0x550 [ 3082.548800] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.549355] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.549877] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.550397] ? lock_release+0x505/0x6f0 [ 3082.550831] ? __up_read+0x192/0x710 [ 3082.551227] ? rwlock_bug.part.0+0x90/0x90 [ 3082.551674] ? up_write+0x460/0x460 [ 3082.552070] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.552603] ? __up_read+0x192/0x710 [ 3082.553000] ? perf_remove_from_context+0x230/0x230 [ 3082.553544] ? up_write+0x460/0x460 [ 3082.553937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.554508] do_syscall_64+0x3b/0x90 [ 3082.554914] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.555472] RIP: 0033:0x7f9d0832eb19 [ 3082.555876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.557837] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.558678] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.559450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.560205] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.560963] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.561929] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.562699] [ 3082.563099] Call Trace: [ 3082.563369] [ 3082.563597] x86_pmu_stop+0x149/0x330 [ 3082.563989] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.564441] x86_pmu_del+0x1be/0x610 [ 3082.564823] event_sched_out+0x2ed/0xaf0 [ 3082.565237] group_sched_out.part.0+0x115/0x360 [ 3082.565717] ctx_sched_out+0x7db/0xa90 [ 3082.566113] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.566650] ? update_curr+0x3a7/0x800 [ 3082.567049] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.567577] ? set_next_entity+0x2f6/0x570 [ 3082.568011] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.568481] __schedule+0xead/0x2190 [ 3082.568866] ? io_schedule_timeout+0x140/0x140 [ 3082.569334] ? perf_duration_warn+0x40/0x40 [ 3082.569780] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.570264] ? lock_release+0x505/0x6f0 [ 3082.570674] ? __cond_resched+0x13/0x20 [ 3082.571078] preempt_schedule_common+0x45/0xc0 [ 3082.571552] __cond_resched+0x13/0x20 [ 3082.571943] __mutex_lock+0xa3/0x1480 [ 3082.572349] ? __perf_event_enable+0x550/0x550 [ 3082.572816] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.573342] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.573845] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.574343] ? lock_release+0x505/0x6f0 [ 3082.574764] ? __up_read+0x192/0x710 [ 3082.575144] ? rwlock_bug.part.0+0x90/0x90 [ 3082.575576] ? up_write+0x460/0x460 [ 3082.575946] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.576454] ? __up_read+0x192/0x710 [ 3082.576835] ? perf_remove_from_context+0x230/0x230 [ 3082.577353] ? up_write+0x460/0x460 [ 3082.577731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.578266] do_syscall_64+0x3b/0x90 [ 3082.578658] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.579180] RIP: 0033:0x7f9d0832eb19 [ 3082.579553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.581417] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.582184] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.582922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.583643] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.584361] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.585077] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.585805] [ 3082.587303] Call Trace: [ 3082.587751] [ 3082.587981] ? x86_pmu_start+0x1c0/0x240 [ 3082.588403] x86_pmu_enable+0x580/0xd90 [ 3082.588817] __perf_event_task_sched_in+0x5e4/0x770 [ 3082.589329] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3082.589849] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3082.590360] ? xfd_validate_state+0x59/0x180 [ 3082.590832] finish_task_switch.isra.0+0x45c/0x870 [ 3082.591334] ? __switch_to+0x5bf/0xf20 [ 3082.591736] __schedule+0x88a/0x2190 [ 3082.592117] ? io_schedule_timeout+0x140/0x140 [ 3082.592581] ? perf_duration_warn+0x40/0x40 [ 3082.593021] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.593513] ? lock_release+0x505/0x6f0 [ 3082.593919] ? __cond_resched+0x13/0x20 [ 3082.594324] preempt_schedule_common+0x45/0xc0 [ 3082.594798] __cond_resched+0x13/0x20 [ 3082.595190] __mutex_lock+0xa3/0x1480 [ 3082.595578] ? __perf_event_enable+0x550/0x550 [ 3082.596045] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.596569] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.597072] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.597567] ? lock_release+0x505/0x6f0 [ 3082.597975] ? __up_read+0x192/0x710 [ 3082.598351] ? rwlock_bug.part.0+0x90/0x90 [ 3082.598795] ? up_write+0x460/0x460 [ 3082.599170] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.599689] ? __up_read+0x192/0x710 [ 3082.600066] ? perf_remove_from_context+0x230/0x230 [ 3082.600572] ? up_write+0x460/0x460 [ 3082.600950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.601481] do_syscall_64+0x3b/0x90 [ 3082.601867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.602393] RIP: 0033:0x7f9d0832eb19 [ 3082.602779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.604638] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.605432] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.606162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.606892] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.607613] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.608331] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.609063] [ 3082.609415] Call Trace: [ 3082.609679] [ 3082.609906] x86_pmu_stop+0x149/0x330 [ 3082.610297] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.610776] x86_pmu_del+0x1be/0x610 [ 3082.611169] event_sched_out+0x2ed/0xaf0 [ 3082.611585] group_sched_out.part.0+0x115/0x360 [ 3082.612059] ctx_sched_out+0x7db/0xa90 [ 3082.612464] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.612994] ? update_curr+0x3a7/0x800 [ 3082.613393] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.613920] ? set_next_entity+0x2f6/0x570 [ 3082.614353] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.614837] __schedule+0xead/0x2190 [ 3082.615229] ? io_schedule_timeout+0x140/0x140 [ 3082.615695] ? perf_duration_warn+0x40/0x40 [ 3082.616153] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.616639] ? lock_release+0x505/0x6f0 [ 3082.617043] ? __cond_resched+0x13/0x20 [ 3082.617457] preempt_schedule_common+0x45/0xc0 [ 3082.617932] __cond_resched+0x13/0x20 [ 3082.618321] __mutex_lock+0xa3/0x1480 [ 3082.618733] ? __perf_event_enable+0x550/0x550 [ 3082.619198] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.619726] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.620238] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.620734] ? lock_release+0x505/0x6f0 [ 3082.621144] ? __up_read+0x192/0x710 [ 3082.621524] ? rwlock_bug.part.0+0x90/0x90 [ 3082.621958] ? up_write+0x460/0x460 [ 3082.622336] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.622855] ? __up_read+0x192/0x710 [ 3082.623238] ? perf_remove_from_context+0x230/0x230 [ 3082.623744] ? up_write+0x460/0x460 [ 3082.624118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.624657] do_syscall_64+0x3b/0x90 [ 3082.625042] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.625571] RIP: 0033:0x7f9d0832eb19 [ 3082.625950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.627836] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.628615] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.629335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.630062] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.630798] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.631517] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.632237] [ 3082.632550] Call Trace: [ 3082.632815] [ 3082.633048] ? x86_pmu_start+0x1c0/0x240 [ 3082.633469] x86_pmu_enable+0x580/0xd90 [ 3082.633887] __perf_event_task_sched_in+0x5e4/0x770 [ 3082.634398] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3082.634937] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3082.635451] ? xfd_validate_state+0x59/0x180 [ 3082.635905] finish_task_switch.isra.0+0x45c/0x870 [ 3082.636405] ? __switch_to+0x5bf/0xf20 [ 3082.636805] __schedule+0x88a/0x2190 [ 3082.637192] ? io_schedule_timeout+0x140/0x140 [ 3082.637662] ? perf_duration_warn+0x40/0x40 [ 3082.638105] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.638593] ? lock_release+0x505/0x6f0 [ 3082.638998] ? __cond_resched+0x13/0x20 [ 3082.639406] preempt_schedule_common+0x45/0xc0 [ 3082.639872] __cond_resched+0x13/0x20 [ 3082.640262] __mutex_lock+0xa3/0x1480 [ 3082.640667] ? __perf_event_enable+0x550/0x550 [ 3082.641169] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.641732] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.642262] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.642792] ? lock_release+0x505/0x6f0 [ 3082.643227] ? __up_read+0x192/0x710 [ 3082.643625] ? rwlock_bug.part.0+0x90/0x90 [ 3082.644088] ? up_write+0x460/0x460 [ 3082.644479] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.645028] ? __up_read+0x192/0x710 [ 3082.645430] ? perf_remove_from_context+0x230/0x230 [ 3082.645971] ? up_write+0x460/0x460 [ 3082.646366] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.646937] do_syscall_64+0x3b/0x90 [ 3082.647343] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.647904] RIP: 0033:0x7f9d0832eb19 [ 3082.648297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.650277] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.651109] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.651879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.652643] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.653413] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.654182] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.654971] [ 3082.655258] Call Trace: [ 3082.655539] [ 3082.655780] x86_pmu_stop+0x149/0x330 [ 3082.656193] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.656673] x86_pmu_del+0x1be/0x610 [ 3082.657081] event_sched_out+0x2ed/0xaf0 [ 3082.657523] group_sched_out.part.0+0x115/0x360 [ 3082.658024] ctx_sched_out+0x7db/0xa90 [ 3082.658453] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.659012] ? lock_release+0x6f0/0x6f0 [ 3082.659447] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.660012] ? set_next_entity+0x2f6/0x570 [ 3082.660473] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.660978] __schedule+0xead/0x2190 [ 3082.661384] ? io_schedule_timeout+0x140/0x140 [ 3082.661879] ? perf_duration_warn+0x40/0x40 [ 3082.662342] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.662854] ? lock_release+0x505/0x6f0 [ 3082.663290] ? __cond_resched+0x13/0x20 [ 3082.663713] preempt_schedule_common+0x45/0xc0 [ 3082.664204] __cond_resched+0x13/0x20 [ 3082.664617] __mutex_lock+0xa3/0x1480 [ 3082.665021] ? __perf_event_enable+0x550/0x550 [ 3082.665506] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.666063] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.666603] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.667123] ? lock_release+0x505/0x6f0 [ 3082.667550] ? __up_read+0x192/0x710 [ 3082.667944] ? rwlock_bug.part.0+0x90/0x90 [ 3082.668401] ? up_write+0x460/0x460 [ 3082.668786] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.669323] ? __up_read+0x192/0x710 [ 3082.669720] ? perf_remove_from_context+0x230/0x230 [ 3082.670259] ? up_write+0x460/0x460 [ 3082.670668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.671227] do_syscall_64+0x3b/0x90 [ 3082.671633] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.672191] RIP: 0033:0x7f9d0832eb19 [ 3082.672583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.674545] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.675354] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.676122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.676884] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.677640] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.678400] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.679175] [ 3082.681354] Call Trace: [ 3082.681650] [ 3082.681877] ? x86_pmu_start+0x1c0/0x240 [ 3082.682296] x86_pmu_enable+0x580/0xd90 [ 3082.682720] __perf_event_task_sched_in+0x5e4/0x770 [ 3082.683233] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3082.683740] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3082.684248] ? xfd_validate_state+0x59/0x180 [ 3082.684696] finish_task_switch.isra.0+0x45c/0x870 [ 3082.685205] ? __switch_to+0x5bf/0xf20 [ 3082.685611] __schedule+0x88a/0x2190 [ 3082.685994] ? io_schedule_timeout+0x140/0x140 [ 3082.686472] ? perf_duration_warn+0x40/0x40 [ 3082.686915] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.687393] ? lock_release+0x505/0x6f0 [ 3082.687811] ? __cond_resched+0x13/0x20 [ 3082.688213] preempt_schedule_common+0x45/0xc0 [ 3082.688675] __cond_resched+0x13/0x20 [ 3082.689067] __mutex_lock+0xa3/0x1480 [ 3082.689454] ? __perf_event_enable+0x550/0x550 [ 3082.689914] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.690451] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.690950] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.691442] ? lock_release+0x505/0x6f0 [ 3082.691843] ? __up_read+0x192/0x710 [ 3082.692216] ? rwlock_bug.part.0+0x90/0x90 [ 3082.692647] ? up_write+0x460/0x460 [ 3082.693017] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.693521] ? __up_read+0x192/0x710 [ 3082.693895] ? perf_remove_from_context+0x230/0x230 [ 3082.694400] ? up_write+0x460/0x460 [ 3082.694787] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.695307] do_syscall_64+0x3b/0x90 [ 3082.695687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.696208] RIP: 0033:0x7f9d0832eb19 [ 3082.696585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.698461] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.699230] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.699949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.700672] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.701397] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.702113] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.702844] [ 3082.703198] Call Trace: [ 3082.703465] [ 3082.703697] x86_pmu_stop+0x149/0x330 [ 3082.704094] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.704543] x86_pmu_del+0x1be/0x610 [ 3082.704921] event_sched_out+0x2ed/0xaf0 [ 3082.705338] group_sched_out.part.0+0x115/0x360 [ 3082.705809] ctx_sched_out+0x7db/0xa90 [ 3082.706209] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.707285] ? update_curr+0x3a7/0x800 [ 3082.708214] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.709410] ? set_next_entity+0x2f6/0x570 [ 3082.710400] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.711519] __schedule+0xead/0x2190 [ 3082.712398] ? io_schedule_timeout+0x140/0x140 [ 3082.713458] ? perf_duration_warn+0x40/0x40 [ 3082.714482] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.715579] ? lock_release+0x505/0x6f0 [ 3082.716504] ? __cond_resched+0x13/0x20 [ 3082.717429] preempt_schedule_common+0x45/0xc0 [ 3082.718503] __cond_resched+0x13/0x20 [ 3082.719389] __mutex_lock+0xa3/0x1480 [ 3082.720278] ? __perf_event_enable+0x550/0x550 [ 3082.721363] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.722591] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.723377] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.724118] ? lock_release+0x505/0x6f0 [ 3082.724754] ? __up_read+0x192/0x710 [ 3082.725345] ? rwlock_bug.part.0+0x90/0x90 [ 3082.726055] ? up_write+0x460/0x460 [ 3082.726615] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.727383] ? __up_read+0x192/0x710 [ 3082.727954] ? perf_remove_from_context+0x230/0x230 [ 3082.728726] ? up_write+0x460/0x460 [ 3082.729286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.730073] do_syscall_64+0x3b/0x90 [ 3082.730653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.731441] RIP: 0033:0x7f9d0832eb19 [ 3082.732005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.734946] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.736117] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.737200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.738291] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.739377] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.740475] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.741578] [ 3082.742170] Call Trace: [ 3082.742576] [ 3082.742974] ? x86_pmu_start+0x1c0/0x240 [ 3082.743607] x86_pmu_enable+0x580/0xd90 [ 3082.744232] __perf_event_task_sched_in+0x5e4/0x770 [ 3082.745045] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3082.745840] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3082.746641] ? xfd_validate_state+0x59/0x180 [ 3082.747314] finish_task_switch.isra.0+0x45c/0x870 [ 3082.748068] ? __switch_to+0x5bf/0xf20 [ 3082.748675] __schedule+0x88a/0x2190 [ 3082.749248] ? io_schedule_timeout+0x140/0x140 [ 3082.749989] ? perf_duration_warn+0x40/0x40 [ 3082.750670] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.751459] ? lock_release+0x505/0x6f0 [ 3082.752062] ? __cond_resched+0x13/0x20 [ 3082.752648] preempt_schedule_common+0x45/0xc0 [ 3082.753325] __cond_resched+0x13/0x20 [ 3082.753942] __mutex_lock+0xa3/0x1480 [ 3082.754546] ? __perf_event_enable+0x550/0x550 [ 3082.755293] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.756043] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.756791] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.757529] ? lock_release+0x505/0x6f0 [ 3082.758205] ? __up_read+0x192/0x710 [ 3082.758765] ? rwlock_bug.part.0+0x90/0x90 [ 3082.759389] ? up_write+0x460/0x460 [ 3082.759924] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.760663] ? __up_read+0x192/0x710 [ 3082.761207] ? perf_remove_from_context+0x230/0x230 [ 3082.762000] ? up_write+0x460/0x460 [ 3082.762548] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.763383] do_syscall_64+0x3b/0x90 [ 3082.763939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.764685] RIP: 0033:0x7f9d0832eb19 [ 3082.765245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.768589] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.769760] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.770886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.771935] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.772995] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.774056] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.775127] [ 3082.775524] Call Trace: [ 3082.775903] [ 3082.776253] x86_pmu_stop+0x149/0x330 [ 3082.776805] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.777459] x86_pmu_del+0x1be/0x610 [ 3082.778015] event_sched_out+0x2ed/0xaf0 [ 3082.778621] group_sched_out.part.0+0x115/0x360 [ 3082.779304] ctx_sched_out+0x7db/0xa90 [ 3082.779869] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.780653] ? lock_release+0x6f0/0x6f0 [ 3082.781293] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.782132] ? set_next_entity+0x2f6/0x570 [ 3082.782754] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.783435] __schedule+0xead/0x2190 [ 3082.783982] ? io_schedule_timeout+0x140/0x140 [ 3082.784673] ? perf_duration_warn+0x40/0x40 [ 3082.785320] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.786032] ? lock_release+0x505/0x6f0 [ 3082.786636] ? __cond_resched+0x13/0x20 [ 3082.787234] preempt_schedule_common+0x45/0xc0 [ 3082.787915] __cond_resched+0x13/0x20 [ 3082.788490] __mutex_lock+0xa3/0x1480 [ 3082.789095] ? __perf_event_enable+0x550/0x550 [ 3082.789763] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.790593] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.791335] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.792059] ? lock_release+0x505/0x6f0 [ 3082.792643] ? __up_read+0x192/0x710 [ 3082.793210] ? rwlock_bug.part.0+0x90/0x90 [ 3082.793856] ? up_write+0x460/0x460 [ 3082.794444] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.795256] ? __up_read+0x192/0x710 [ 3082.795796] ? perf_remove_from_context+0x230/0x230 [ 3082.796544] ? up_write+0x460/0x460 [ 3082.797090] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.797911] do_syscall_64+0x3b/0x90 [ 3082.798545] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.799299] RIP: 0033:0x7f9d0832eb19 [ 3082.799833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.802603] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.803711] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.804779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.805837] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.806916] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.807963] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.809032] [ 3082.811499] Call Trace: [ 3082.811884] [ 3082.812235] ? x86_pmu_start+0x1c0/0x240 [ 3082.812833] x86_pmu_enable+0x580/0xd90 [ 3082.813428] __perf_event_task_sched_in+0x5e4/0x770 [ 3082.814214] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3082.815028] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3082.815764] ? xfd_validate_state+0x59/0x180 [ 3082.816423] finish_task_switch.isra.0+0x45c/0x870 [ 3082.817205] ? __switch_to+0x5bf/0xf20 [ 3082.817775] __schedule+0x88a/0x2190 [ 3082.818387] ? io_schedule_timeout+0x140/0x140 [ 3082.819079] ? perf_duration_warn+0x40/0x40 [ 3082.819713] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.820485] ? lock_release+0x505/0x6f0 [ 3082.821140] ? __cond_resched+0x13/0x20 [ 3082.821723] preempt_schedule_common+0x45/0xc0 [ 3082.822396] __cond_resched+0x13/0x20 [ 3082.822975] __mutex_lock+0xa3/0x1480 [ 3082.823538] ? __perf_event_enable+0x550/0x550 [ 3082.824278] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.825110] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.825841] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.826572] ? lock_release+0x505/0x6f0 [ 3082.827166] ? __up_read+0x192/0x710 [ 3082.827714] ? rwlock_bug.part.0+0x90/0x90 [ 3082.828373] ? up_write+0x460/0x460 [ 3082.828905] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.829643] ? __up_read+0x192/0x710 [ 3082.830198] ? perf_remove_from_context+0x230/0x230 [ 3082.830935] ? up_write+0x460/0x460 [ 3082.831491] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.832327] do_syscall_64+0x3b/0x90 [ 3082.832884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.833693] RIP: 0033:0x7f9d0832eb19 [ 3082.834237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.837051] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.838145] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.839170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.840216] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.841242] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.842321] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.843420] [ 3082.843839] Call Trace: [ 3082.844234] [ 3082.844554] x86_pmu_stop+0x149/0x330 [ 3082.845119] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3082.845760] x86_pmu_del+0x1be/0x610 [ 3082.846366] event_sched_out+0x2ed/0xaf0 [ 3082.847020] group_sched_out.part.0+0x115/0x360 [ 3082.847707] ctx_sched_out+0x7db/0xa90 [ 3082.848290] __perf_event_task_sched_out+0x6ae/0x1950 [ 3082.849109] ? update_curr+0x3a7/0x800 [ 3082.849684] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3082.850511] ? set_next_entity+0x2f6/0x570 [ 3082.851157] ? pick_next_task_fair+0x5ba/0xb30 [ 3082.851817] __schedule+0xead/0x2190 [ 3082.852375] ? io_schedule_timeout+0x140/0x140 [ 3082.853099] ? perf_duration_warn+0x40/0x40 [ 3082.853728] ? rcu_read_lock_sched_held+0xd/0x70 [ 3082.854478] ? lock_release+0x505/0x6f0 [ 3082.855059] ? __cond_resched+0x13/0x20 [ 3082.855625] preempt_schedule_common+0x45/0xc0 [ 3082.856362] __cond_resched+0x13/0x20 [ 3082.856924] __mutex_lock+0xa3/0x1480 [ 3082.857524] ? __perf_event_enable+0x550/0x550 [ 3082.858201] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.858953] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3082.859665] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3082.860429] ? lock_release+0x505/0x6f0 [ 3082.861044] ? __up_read+0x192/0x710 [ 3082.861597] ? rwlock_bug.part.0+0x90/0x90 [ 3082.862224] ? up_write+0x460/0x460 [ 3082.862758] __do_sys_perf_event_open+0x1d13/0x3040 [ 3082.863522] ? __up_read+0x192/0x710 [ 3082.864080] ? perf_remove_from_context+0x230/0x230 [ 3082.864794] ? up_write+0x460/0x460 [ 3082.865385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.866177] do_syscall_64+0x3b/0x90 [ 3082.866741] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3082.867492] RIP: 0033:0x7f9d0832eb19 [ 3082.868197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.871610] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3082.872706] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3082.873796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3082.874885] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3082.875911] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3082.877001] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3082.878062] 20:02:04 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:02:04 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r10, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:04 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4) 20:02:04 executing program 4: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:02:04 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:02:04 executing program 0: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:02:04 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 20:02:04 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) [ 3091.890394] Call Trace: [ 3091.891258] [ 3091.891695] ? x86_pmu_start+0x1c0/0x240 [ 3091.892503] x86_pmu_enable+0x580/0xd90 [ 3091.893286] ? amd_pmu_disable_virt+0xa0/0xa0 [ 3091.894174] ctx_resched+0x2b0/0x390 [ 3091.894925] __perf_install_in_context+0x285/0x310 [ 3091.895886] ? __perf_event_enable+0x550/0x550 [ 3091.896777] remote_function+0x125/0x1b0 [ 3091.897578] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3091.898665] ? perf_duration_warn+0x40/0x40 [ 3091.899512] generic_exec_single+0x203/0x300 [ 3091.900369] smp_call_function_single+0x189/0x460 [ 3091.901305] ? perf_duration_warn+0x40/0x40 [ 3091.902152] ? generic_exec_single+0x300/0x300 [ 3091.903049] ? perf_duration_warn+0x40/0x40 [ 3091.903896] ? lockdep_init_map_type+0x2c3/0x7a0 [ 3091.904826] ? __raw_spin_lock_init+0x36/0x110 [ 3091.905729] ? __perf_event_enable+0x550/0x550 [ 3091.906648] task_function_call+0xe5/0x170 [ 3091.907487] ? pmu_dev_release+0x20/0x20 [ 3091.908281] ? __perf_event_enable+0x550/0x550 [ 3091.909170] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3091.910258] ? exclusive_event_installable+0x254/0x320 [ 3091.911301] perf_install_in_context+0x2cb/0x550 [ 3091.912243] ? perf_group_attach+0x450/0x450 [ 3091.913110] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3091.914183] ? security_capable+0x95/0xc0 [ 3091.915017] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3091.916096] ? exclusive_event_installable+0x254/0x320 [ 3091.917126] __do_sys_perf_event_open+0x1bf0/0x3040 [ 3091.918112] ? __up_read+0x192/0x710 [ 3091.918863] ? perf_remove_from_context+0x230/0x230 [ 3091.919842] ? up_write+0x460/0x460 [ 3091.920556] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3091.921537] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 3091.922612] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3091.923628] do_syscall_64+0x3b/0x90 [ 3091.924368] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3091.925381] RIP: 0033:0x7f9d0832eb19 [ 3091.926099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3091.929685] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3091.931171] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3091.932553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3091.933907] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3091.935305] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3091.936691] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3091.938094] [ 3091.938798] Call Trace: [ 3091.939319] [ 3091.939763] x86_pmu_stop+0x149/0x330 [ 3091.940515] x86_pmu_del+0x1be/0x610 [ 3091.941256] event_sched_out+0x2ed/0xaf0 [ 3091.942055] group_sched_out.part.0+0x115/0x360 [ 3091.942992] ctx_sched_out+0x7db/0xa90 [ 3091.943760] __perf_event_task_sched_out+0x6ae/0x1950 [ 3091.944772] ? update_curr+0x3a7/0x800 [ 3091.945545] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3091.946562] ? set_next_entity+0x2f6/0x570 [ 3091.947400] ? pick_next_task_fair+0x5ba/0xb30 [ 3091.948297] __schedule+0xead/0x2190 [ 3091.949027] ? io_schedule_timeout+0x140/0x140 [ 3091.949919] ? perf_duration_warn+0x40/0x40 [ 3091.950777] ? rcu_read_lock_sched_held+0xd/0x70 [ 3091.951706] ? lock_release+0x505/0x6f0 [ 3091.952478] ? __cond_resched+0x13/0x20 [ 3091.953256] preempt_schedule_common+0x45/0xc0 [ 3091.954161] __cond_resched+0x13/0x20 [ 3091.954923] __mutex_lock+0xa3/0x1480 [ 3091.955669] ? __perf_event_enable+0x550/0x550 [ 3091.956566] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3091.957570] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3091.958529] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3091.959483] ? lock_release+0x505/0x6f0 [ 3091.960262] ? __up_read+0x192/0x710 [ 3091.960982] ? rwlock_bug.part.0+0x90/0x90 [ 3091.961808] ? up_write+0x460/0x460 [ 3091.962514] ? security_capable+0x95/0xc0 [ 3091.963345] __do_sys_perf_event_open+0x1d13/0x3040 [ 3091.964324] ? __up_read+0x192/0x710 [ 3091.965044] ? perf_remove_from_context+0x230/0x230 [ 3091.966025] ? up_write+0x460/0x460 [ 3091.966746] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3091.967722] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 3091.968763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3091.969773] do_syscall_64+0x3b/0x90 [ 3091.970511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3091.971526] RIP: 0033:0x7f9d0832eb19 [ 3091.972249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3091.975836] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3091.977315] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3091.978703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3091.980081] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3091.981455] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3091.982849] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3091.984221] 20:02:05 executing program 6: perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:02:05 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4) 20:02:05 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 5: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r2, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r3, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 3: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') r2 = getpid() prlimit64(r2, 0x3, &(0x7f0000000040)={0x8, 0x7fffffff}, &(0x7f0000000080)) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/netlink\x00') timerfd_gettime(r3, &(0x7f0000000100)) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000140)={0x93f, 0x7663}, &(0x7f0000000180)) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0x5, 0x4, 0x40, 0x0, 0x7fffffff, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x223764b2c9424069, @perf_config_ext={0x5, 0x9}, 0x10008, 0x3, 0x7fff, 0x9, 0x7, 0x3, 0x7, 0x0, 0x6, 0x0, 0x7ff}, r0, 0x0, r3, 0x0) r5 = getpid() r6 = syz_open_procfs(r5, &(0x7f0000000240)='fd/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) r8 = getpid() r9 = syz_open_procfs$namespace(r5, &(0x7f00000004c0)='ns/cgroup\x00') sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x13c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4) 20:02:05 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 7: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) 20:02:05 executing program 4: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/snmp6\x00') getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe6, 0x14}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x20}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5f}]}, 0x70}, 0x1, 0x0, 0x0, 0x99986e2a98593425}, 0xc005) connect$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) timerfd_gettime(r1, &(0x7f0000000440)) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r2, 0xc19, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3e}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x11}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xa}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x9}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6d}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) [ 3092.193457] Call Trace: [ 3092.194370] [ 3092.194975] ? x86_pmu_start+0x1c0/0x240 [ 3092.196050] x86_pmu_enable+0x580/0xd90 [ 3092.197093] __perf_event_task_sched_in+0x5e4/0x770 [ 3092.198392] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3092.199690] ? rcu_read_lock_sched_held+0xd/0x70 [ 3092.200922] ? lock_release+0x505/0x6f0 [ 3092.201951] ? __schedule+0x828/0x2190 [ 3092.202991] ? lock_downgrade+0x6d0/0x6d0 [ 3092.204005] ? set_next_entity+0x2f6/0x570 [ 3092.205012] finish_task_switch.isra.0+0x45c/0x870 [ 3092.206186] ? __switch_to+0x5bf/0xf20 [ 3092.207136] __schedule+0x88a/0x2190 [ 3092.208019] ? io_schedule_timeout+0x140/0x140 [ 3092.209093] ? perf_duration_warn+0x40/0x40 [ 3092.210131] ? rcu_read_lock_sched_held+0xd/0x70 [ 3092.211228] ? lock_release+0x505/0x6f0 [ 3092.212164] ? __cond_resched+0x13/0x20 [ 3092.213098] preempt_schedule_common+0x45/0xc0 [ 3092.214183] __cond_resched+0x13/0x20 [ 3092.215099] __mutex_lock+0xa3/0x1480 [ 3092.215989] ? __perf_event_enable+0x550/0x550 [ 3092.217060] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.218292] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3092.219493] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3092.220615] ? lock_release+0x505/0x6f0 [ 3092.221553] ? __up_read+0x192/0x710 [ 3092.222428] ? rwlock_bug.part.0+0x90/0x90 [ 3092.223434] ? up_write+0x460/0x460 [ 3092.224267] ? security_capable+0x95/0xc0 [ 3092.225220] __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.226384] ? __up_read+0x192/0x710 [ 3092.227263] ? perf_remove_from_context+0x230/0x230 [ 3092.228415] ? up_write+0x460/0x460 [ 3092.229252] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3092.230395] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 3092.231659] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.232865] do_syscall_64+0x3b/0x90 [ 3092.233758] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.234959] RIP: 0033:0x7f9d0832eb19 [ 3092.235829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.240124] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3092.241894] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3092.243574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3092.245216] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3092.246877] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3092.248525] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3092.250175] [ 3092.250875] Call Trace: [ 3092.251470] [ 3092.251978] x86_pmu_stop+0x149/0x330 [ 3092.252881] ? kasan_save_stack+0x1e/0x40 [ 3092.253846] x86_pmu_del+0x1be/0x610 [ 3092.254729] event_sched_out+0x2ed/0xaf0 [ 3092.255671] group_sched_out.part.0+0x115/0x360 [ 3092.256749] ctx_sched_out+0x7db/0xa90 [ 3092.257638] __perf_event_task_sched_out+0x6ae/0x1950 [ 3092.258840] ? update_curr+0x3a7/0x800 [ 3092.259762] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3092.260983] ? set_next_entity+0x2f6/0x570 [ 3092.261921] ? update_curr+0x188/0x800 [ 3092.262788] ? pick_next_task_fair+0x5ba/0xb30 [ 3092.263804] __schedule+0xead/0x2190 [ 3092.264628] ? io_schedule_timeout+0x140/0x140 [ 3092.265629] ? perf_duration_warn+0x40/0x40 [ 3092.266586] ? rcu_read_lock_sched_held+0xd/0x70 [ 3092.267623] ? lock_release+0x505/0x6f0 [ 3092.268494] ? __cond_resched+0x13/0x20 [ 3092.269371] preempt_schedule_common+0x45/0xc0 [ 3092.270380] __cond_resched+0x13/0x20 [ 3092.271253] __mutex_lock+0xa3/0x1480 [ 3092.272097] ? __perf_event_enable+0x550/0x550 [ 3092.273093] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.274224] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3092.275313] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3092.276374] ? lock_release+0x505/0x6f0 [ 3092.277243] ? __up_read+0x192/0x710 [ 3092.278050] ? rwlock_bug.part.0+0x90/0x90 [ 3092.278986] ? up_write+0x460/0x460 [ 3092.279775] ? security_capable+0x95/0xc0 [ 3092.280684] __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.281777] ? __up_read+0x192/0x710 [ 3092.282601] ? perf_remove_from_context+0x230/0x230 [ 3092.283694] ? up_write+0x460/0x460 [ 3092.284491] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3092.285579] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 3092.286780] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.287907] do_syscall_64+0x3b/0x90 [ 3092.288720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.289830] RIP: 0033:0x7f9d0832eb19 [ 3092.290653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.294623] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3092.296242] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3092.297764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3092.299294] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3092.300810] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3092.302324] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3092.303883] [ 3092.313910] Call Trace: [ 3092.314488] [ 3092.314971] ? x86_pmu_start+0x1c0/0x240 [ 3092.315842] x86_pmu_enable+0x580/0xd90 [ 3092.316692] __perf_event_task_sched_in+0x5e4/0x770 [ 3092.317759] ? perf_event_sched_in.isra.0+0x80/0x80 [ 3092.318854] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 3092.319916] ? xfd_validate_state+0x59/0x180 [ 3092.320863] finish_task_switch.isra.0+0x45c/0x870 [ 3092.321914] ? __switch_to+0x5bf/0xf20 [ 3092.322764] __schedule+0x88a/0x2190 [ 3092.323565] ? io_schedule_timeout+0x140/0x140 [ 3092.324539] ? perf_duration_warn+0x40/0x40 [ 3092.325467] ? rcu_read_lock_sched_held+0xd/0x70 [ 3092.326474] ? lock_release+0x505/0x6f0 [ 3092.327331] ? __cond_resched+0x13/0x20 [ 3092.328180] preempt_schedule_common+0x45/0xc0 [ 3092.329153] __cond_resched+0x13/0x20 [ 3092.329959] __mutex_lock+0xa3/0x1480 [ 3092.330798] ? __perf_event_enable+0x550/0x550 [ 3092.331766] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.332855] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3092.333895] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3092.334939] ? lock_release+0x505/0x6f0 [ 3092.335782] ? __up_read+0x192/0x710 [ 3092.336561] ? rwlock_bug.part.0+0x90/0x90 [ 3092.337455] ? up_write+0x460/0x460 [ 3092.338217] ? security_capable+0x95/0xc0 [ 3092.339104] __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.340161] ? __up_read+0x192/0x710 [ 3092.340940] ? perf_remove_from_context+0x230/0x230 [ 3092.341992] ? up_write+0x460/0x460 [ 3092.342780] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 3092.343831] ? fpregs_assert_state_consistent+0xbc/0xe0 [ 3092.344951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3092.346036] do_syscall_64+0x3b/0x90 [ 3092.346841] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3092.347955] RIP: 0033:0x7f9d0832eb19 [ 3092.348753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3092.352742] RSP: 002b:00007f9d058a4188 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3092.354381] RAX: ffffffffffffffda RBX: 00007f9d08441f60 RCX: 00007f9d0832eb19 [ 3092.355926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200001c0 [ 3092.357463] RBP: 00007f9d08388f6d R08: 0000000000000000 R09: 0000000000000000 [ 3092.359013] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3092.360545] R13: 00007ffe3ad2227f R14: 00007f9d058a4300 R15: 0000000000022000 [ 3092.362089] [ 3092.362721] Call Trace: [ 3092.363285] [ 3092.363764] x86_pmu_stop+0x149/0x330 [ 3092.364590] ? x86_pmu_enable_all+0xc5/0x3c0 [ 3092.365543] x86_pmu_del+0x1be/0x610 [ 3092.366352] event_sched_out+0x2ed/0xaf0 [ 3092.367248] group_sched_out.part.0+0x115/0x360 [ 3092.368252] ctx_sched_out+0x7db/0xa90 [ 3092.369092] __perf_event_task_sched_out+0x6ae/0x1950 [ 3092.370204] ? update_curr+0x3a7/0x800 [ 3092.371045] ? perf_event_update_userpage+0x7c0/0x7c0 [ 3092.372140] ? set_next_entity+0x2f6/0x570 [ 3092.373047] ? pick_next_task_fair+0x5ba/0xb30 [ 3092.374028] __schedule+0xead/0x2190 [ 3092.374835] ? io_schedule_timeout+0x140/0x140 [ 3092.375809] ? perf_duration_warn+0x40/0x40 [ 3092.376738] ? rcu_read_lock_sched_held+0xd/0x70 [ 3092.377743] ? lock_release+0x505/0x6f0 [ 3092.378613] ? __cond_resched+0x13/0x20 [ 3092.379467] preempt_schedule_common+0x45/0xc0 [ 3092.380444] __cond_resched+0x13/0x20 [ 3092.381256] __mutex_lock+0xa3/0x1480 [ 3092.382071] ? __perf_event_enable+0x550/0x550 [ 3092.383050] ? __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.384148] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 3092.385198] ? mutex_lock_io_nested+0x12c0/0x12c0 [ 3092.386228] ? lock_release+0x505/0x6f0 [ 3092.387088] ? __up_read+0x192/0x710 [ 3092.387875] ? rwlock_bug.part.0+0x90/0x90 [ 3092.388781] ? up_write+0x460/0x460 [ 3092.389551] ? security_capable+0x95/0xc0 [ 3092.390438] __do_sys_perf_event_open+0x1d13/0x3040 [ 3092.391508] ? __up_read+0x192/0x710 [ 3092.392286] ? perf_remove_from_context+0x230/0x230 VM DIAGNOSIS: 20:01:55 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8236a8e1 RDI=ffffffff8739c420 RBP=ffffffff8739c3e0 RSP=ffff8880387ef290 R8 =0000000000000000 R9 =0000000000000020 R10=ffffffff8236c4a3 R11=000000000000000a R12=0000000000000020 R13=0000000000000020 R14=ffffffff8739c3e0 R15=dffffc0000000000 RIP=ffffffff8236a938 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9d058a4700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9d08442018 CR3=000000003782c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 00007f9d084157c0 00007f9d084157c8 YMM02=0000000000000000 0000000000000000 00007f9d084157e0 00007f9d084157c0 YMM03=0000000000000000 0000000000000000 00007f9d084157c8 00007f9d084157c0 YMM04=0000000000000000 0000000000000000 ff00000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000000c RBX=ffff888027b22000 RCX=0000000000000000 RDX=ffff888036440000 RSI=0000000000000001 RDI=0000000000000000 RBP=ffff88801f6602a0 RSP=ffff88801d2b7a18 R8 =000000000000000c R9 =0000000000000000 R10=ffffffff81a193d7 R11=0000000000000000 R12=0000000000000001 R13=000000000000000c R14=0000000000000001 R15=0000000000003e62 RIP=ffffffff81432e01 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555e26400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f240a9b9000 CR3=000000000b71c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000