Warning: Permanently added '[localhost]:31583' (ECDSA) to the list of known hosts. 2022/10/01 22:04:05 fuzzer started 2022/10/01 22:04:06 dialing manager at localhost:35095 syzkaller login: [ 41.200687] cgroup: Unknown subsys name 'net' [ 41.311288] cgroup: Unknown subsys name 'rlimit' 2022/10/01 22:04:21 syscalls: 202 2022/10/01 22:04:21 code coverage: enabled 2022/10/01 22:04:21 comparison tracing: enabled 2022/10/01 22:04:21 extra coverage: enabled 2022/10/01 22:04:21 setuid sandbox: enabled 2022/10/01 22:04:21 namespace sandbox: enabled 2022/10/01 22:04:21 Android sandbox: enabled 2022/10/01 22:04:21 fault injection: enabled 2022/10/01 22:04:21 leak checking: enabled 2022/10/01 22:04:21 net packet injection: enabled 2022/10/01 22:04:21 net device setup: enabled 2022/10/01 22:04:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 22:04:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 22:04:21 USB emulation: enabled 2022/10/01 22:04:21 hci packet injection: enabled 2022/10/01 22:04:21 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 22:04:21 802.15.4 emulation: enabled 2022/10/01 22:04:21 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 22:04:22 starting 8 fuzzer processes 22:04:22 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r7, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x7f}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r2) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:04:22 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000780)={0x81, @time={0x8, 0x8}, 0x1, {0x1, 0x81}, 0x76, 0x0, 0xff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000007c0)) 22:04:22 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) write$P9_RREMOVE(r7, &(0x7f0000000680)={0x7, 0x7b, 0x1}, 0x7) 22:04:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:04:22 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:04:22 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, 0x0, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 22:04:22 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 22:04:22 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r5, r5], 0x2}, 0x2) [ 57.133899] audit: type=1400 audit(1664661862.625:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 58.467509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.471737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.473323] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.475985] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.479247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.480445] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.492254] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.516489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.518267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.519509] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.521093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.522952] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.524981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.527131] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.528100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.529081] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.530591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.543301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.544728] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.545199] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.547712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.547801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.550871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.552193] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.553430] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.554587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.555854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.557212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.558915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.562129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.563919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.567240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.568709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.570085] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.576302] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.581656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.583234] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.583899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.585023] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.588704] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.590098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.595000] Bluetooth: hci5: HCI_REQ-0x0c1a [ 58.596584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.603606] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.604054] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.606251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.606375] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.609308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.610735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.614299] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.620330] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.620368] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.631099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.648372] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.649959] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.665620] Bluetooth: hci7: HCI_REQ-0x0c1a [ 60.534388] Bluetooth: hci2: command 0x0409 tx timeout [ 60.597961] Bluetooth: hci0: command 0x0409 tx timeout [ 60.599055] Bluetooth: hci1: command 0x0409 tx timeout [ 60.661933] Bluetooth: hci5: command 0x0409 tx timeout [ 60.662941] Bluetooth: hci3: command 0x0409 tx timeout [ 60.664060] Bluetooth: hci4: command 0x0409 tx timeout [ 60.664964] Bluetooth: hci6: command 0x0409 tx timeout [ 60.726224] Bluetooth: hci7: command 0x0409 tx timeout [ 62.581840] Bluetooth: hci2: command 0x041b tx timeout [ 62.646067] Bluetooth: hci1: command 0x041b tx timeout [ 62.646930] Bluetooth: hci0: command 0x041b tx timeout [ 62.709913] Bluetooth: hci6: command 0x041b tx timeout [ 62.711050] Bluetooth: hci4: command 0x041b tx timeout [ 62.712136] Bluetooth: hci3: command 0x041b tx timeout [ 62.713176] Bluetooth: hci5: command 0x041b tx timeout [ 62.773911] Bluetooth: hci7: command 0x041b tx timeout [ 64.630907] Bluetooth: hci2: command 0x040f tx timeout [ 64.694862] Bluetooth: hci0: command 0x040f tx timeout [ 64.695378] Bluetooth: hci1: command 0x040f tx timeout [ 64.758850] Bluetooth: hci5: command 0x040f tx timeout [ 64.759331] Bluetooth: hci3: command 0x040f tx timeout [ 64.760153] Bluetooth: hci4: command 0x040f tx timeout [ 64.760580] Bluetooth: hci6: command 0x040f tx timeout [ 64.823017] Bluetooth: hci7: command 0x040f tx timeout [ 66.677855] Bluetooth: hci2: command 0x0419 tx timeout [ 66.741873] Bluetooth: hci1: command 0x0419 tx timeout [ 66.742323] Bluetooth: hci0: command 0x0419 tx timeout [ 66.805824] Bluetooth: hci6: command 0x0419 tx timeout [ 66.806427] Bluetooth: hci4: command 0x0419 tx timeout [ 66.806998] Bluetooth: hci3: command 0x0419 tx timeout [ 66.807521] Bluetooth: hci5: command 0x0419 tx timeout [ 66.869851] Bluetooth: hci7: command 0x0419 tx timeout 22:05:18 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 22:05:19 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 22:05:19 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) 22:05:19 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:05:19 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 22:05:19 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000780)={0x81, @time={0x8, 0x8}, 0x1, {0x1, 0x81}, 0x76, 0x0, 0xff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000007c0)) 22:05:20 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 22:05:20 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000780)={0x81, @time={0x8, 0x8}, 0x1, {0x1, 0x81}, 0x76, 0x0, 0xff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000007c0)) 22:05:36 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 22:05:36 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:05:36 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) write$P9_RREMOVE(r7, &(0x7f0000000680)={0x7, 0x7b, 0x1}, 0x7) 22:05:36 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000780)={0x81, @time={0x8, 0x8}, 0x1, {0x1, 0x81}, 0x76, 0x0, 0xff}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000007c0)) 22:05:36 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:05:37 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, 0x0, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 22:05:37 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r5, r5], 0x2}, 0x2) 22:05:37 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r7, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x7f}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r2) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:05:37 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:05:49 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r5, r5], 0x2}, 0x2) 22:05:49 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:05:49 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r7, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x7f}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r2) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:05:49 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000780)={0x81, @time={0x8, 0x8}, 0x1, {0x1, 0x81}, 0x76, 0x0, 0xff}) 22:05:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:05:49 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) write$P9_RREMOVE(r7, &(0x7f0000000680)={0x7, 0x7b, 0x1}, 0x7) 22:05:49 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:05:49 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, 0x0, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 22:05:49 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:05:49 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) r7 = syz_io_uring_complete(0x0) write$P9_RREMOVE(r7, &(0x7f0000000680)={0x7, 0x7b, 0x1}, 0x7) 22:05:49 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:05:50 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) syz_io_uring_complete(0x0) 22:05:50 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r7, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x7f}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_genetlink_get_family_id$devlink(&(0x7f0000000e40), r2) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:06:00 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r7, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x104, r6, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x1f}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x16, 0x7f}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}, {0x5, 0x12, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:06:00 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, 0x0, 0x420, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 22:06:00 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:06:00 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:06:00 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:00 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:06:00 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[r5, r5], 0x2}, 0x2) 22:06:01 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) syz_io_uring_complete(0x0) 22:06:01 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:06:01 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000006c0)={0x14, 0x49, 0x1, {0x2, 0x0, 0x3}}, 0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:01 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:06:01 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) syz_io_uring_complete(0x0) 22:06:01 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = getpid() get_robust_list(r5, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:01 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:06:01 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:06:01 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) 22:06:01 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r6, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:06:01 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x8c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1000}, @handle=@pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 22:06:14 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) 22:06:14 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000600)={0x3ff, 0x7fff, 0xa89, 0x4, 0x6, 0x3f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:06:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r6, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:06:14 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:06:14 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpid() r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:14 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) 22:06:14 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:06:14 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) sendmsg$NL80211_CMD_GET_POWER_SAVE(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r10, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x5) 22:06:14 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, 0x7, @any, 0x1, 0x2}, 0xe) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:06:14 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) 22:06:14 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpid() r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:14 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:06:14 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r4, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000081}, 0x20008810) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) 22:06:14 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r4 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r5 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r6, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x480}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x40000d0) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:06:14 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) 22:06:14 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) 22:06:28 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLINK(r0, &(0x7f0000000040)={0x7, 0x47, 0x1}, 0x7) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x17, 0x40, 0x4, 0x63, @empty, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x10, 0x8000, 0xde, 0x3}}) write$P9_RSYMLINK(r1, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x0, 0x4, 0x7}}, 0x14) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x40, 0x1, 0x6}}, 0x14) r2 = syz_io_uring_complete(0x0) write$P9_RSYMLINK(r2, &(0x7f0000000200)={0x14, 0x11, 0x2, {0x80, 0x2}}, 0x14) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/7) r3 = socket(0x2, 0x5, 0xf28) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1c4, r4, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x3c}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x180, 0x2a, [@tim={0x5, 0x63, {0x5e, 0x2a, 0x0, "7b8ec9fa0ff998fe03e018a4e430f133716250f27e9d7ffd8acd8abf1ec913b430a7f5d4c1682cb98c4e77668a04c364c97b0b6e0fc027c516f7a65e88a9df0efabad112bf93efe93f1ff032504745146a2f50b341f9fb888f371eadbc1103e9"}}, @mesh_id={0x72, 0x6}, @perr={0x84, 0xfc, {0x3, 0x10, [@not_ext={{}, @device_a, 0x3f, "", 0x12}, @ext={{}, @broadcast, 0x6, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x8, "", 0x2}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @device_a, 0x1, "", 0x23}, @ext={{}, @device_b, 0x8001, @device_a, 0xd}, @ext={{}, @device_b, 0x1, @device_a, 0xf}, @ext={{}, @device_b, 0x0, @device_a, 0x3b}, @not_ext={{}, @device_b, 0x9, "", 0x38}, @not_ext={{}, @device_a, 0xfffffc01, "", 0x3e}, @ext={{}, @device_b, 0x0, @device_b, 0x1f}, @ext={{}, @broadcast, 0x3, @device_a, 0x26}, @not_ext={{}, @device_a, 0x5, "", 0x3}, @not_ext={{}, @broadcast, 0x800, "", 0x2e}, @not_ext={{}, @device_b, 0x10000, "", 0x1f}, @ext={{}, @device_b, 0xfffffffb, @device_b, 0x37}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9}}, @peer_mgmt={0x75, 0x6, {0x0, 0x8, @val=0x1, @void, @void}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000580)=0x3, 0x4) write$P9_RREMOVE(r2, &(0x7f00000005c0)={0x7, 0x7b, 0x1}, 0x7) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000600)="777aa9394b99ac8103c6108c2cfd1f44", 0x10) r6 = socket(0x23, 0x80000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000640)) 22:06:28 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) r3 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000580)=0xfffffffffffffffe, 0x4) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:06:28 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd0, r0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "90028a47c22384bba2413741bb5e8d4ae1b4809c00ebdcaf1f"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040050}, 0x4044040) r1 = socket(0x18, 0x1, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x82ce}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x150442, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r5, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xdb, 0xa8, @random="24bb52373388e962801645ea570328923548b13b97e109f644de2f679a1acc8a84d250e826af07bb9ab0b317236b13c1d6d4c2d9d121b12a8692ae46625e2269f1ba290e8cacbf89c2b7c27266c884d8c5c72070d0c69a2ba696d305dea1ae4184d0e55dc15ba2885879eb8681f80adfa76e3971c58501a3b78236a32cc868688113b56e246d9f96de32ef196d9631514b567bb6d1ec2180e4fe8db1fe9f72b3f3aa5020c3472b9ad0690969230fbba599d75f1c9ce0bbef5fa1149ea003270c0b0926d44b79a91dddf91542a531ba341da61a3f842e28"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x10) syz_io_uring_setup(0xd45, &(0x7f0000000700)={0x0, 0x69c6, 0x8, 0x1, 0x1cd, 0x0, r4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r8 = syz_io_uring_complete(r6) sendmsg$IPVS_CMD_SET_DEST(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x11}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r8) 22:06:28 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x140, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffff000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe6f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4040}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x33}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private2, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1503932d, @mcast1, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'bond0\x00'}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4104}, 0x40) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa6e, 0x2e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x695}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x88e}]}, 0x58}, 0x1, 0x0, 0x0, 0x8801}, 0x2815) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) r3 = socket(0x9, 0x2, 0x1000) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x184, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_ID={0x39, 0x3, "d2b02c2f4357904e0c5c8377120325682a3b73c4472a2cba7fb768ce0d42bd91426ff39f460059e29c3f9d2d08f3b6288129bbadcd"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8f0}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb68}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6076}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea3c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "99b8a0e14204fbea68086e436bb81b32aa1c616737931f"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44004}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) r4 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000a00)={"8794d8bd0793708961157dc817933e9d", r5, 0x0, {0xcf1, 0x3f}, {0x3ff, 0x8}, 0x109, [0xfffffffffffffffe, 0x47d, 0x100, 0x8e, 0xffffffff, 0xd9f, 0x8, 0x2, 0x7fffffff, 0x64111026, 0xff, 0x7f, 0x5, 0x0, 0x7, 0x4000000000000]}) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), 0xffffffffffffffff) 22:06:28 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) 22:06:28 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:06:28 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) socket(0xb, 0xa, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) 22:06:28 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) getpid() r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:28 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x359d4847, 0x69a4, 0x1, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000000c0)={0x8, 0x3f, 0x0, 'queue0\x00', 0x1}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x341a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000011) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000280)={0x33c03ccf, 0x7fffffff, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x367, @tick=0x40000000, 0xb1, {0x1f, 0x18}, 0x9, 0x0, 0x81}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x68}}, 0x40040c0) r2 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000540)=0x8000, 0x4) syz_io_uring_complete(0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x141800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f00000006c0)={0xffff882d, 0x387c, 0x1, 'queue1\x00', 0x9}) 22:06:28 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:29 executing program 6: setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="40fa45271df0621e7ae5ceaf971db551", 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0xffffffff}, @mss={0x2, 0x10001}, @mss={0x2, 0x8}, @sack_perm, @window={0x3, 0x5, 0x3}, @window={0x3, 0x7ff, 0x1}], 0x6) r0 = syz_io_uring_complete(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "328daa9f04b51193", "26b63a8e153887119e11e3105a25f8d8", "db6da5a1", "fbc1cfb1c27bda30"}, 0x28) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x8}, 0x4) r1 = syz_io_uring_setup(0x1fe2, &(0x7f00000001c0)={0x0, 0xaea, 0x10, 0x3, 0x3cb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r2 = socket(0x25, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = syz_io_uring_setup(0x7470, &(0x7f0000000300)={0x0, 0xa0c5, 0x2, 0x0, 0x386, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x20010, r3, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x8000000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) 22:06:29 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402002, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x2, {0x4, 0x3, 0x4}}, 0x14) write$P9_RRENAME(r0, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x20, 0x4, 0x7}}, 0x14) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) write$tcp_congestion(r0, &(0x7f0000000140)='bic\x00', 0x4) r1 = socket(0x21, 0x3, 0x5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e23, 0x5, @mcast1, 0xffffff81}}, 0x0, 0x0, 0x23, 0x0, "73d721b315a880c36fea87cc123c83c20f48073927ff2ecccbf20d2783f731f33d841865ad89f6151fcffc3e2e7d8a876d58b43295079635382a279b25e5c00c7639ffc01c54634c69dc1894457315ee"}, 0xd8) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREMOVE(r2, &(0x7f0000000340)={0x7, 0x7b, 0x1}, 0x7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd_index=0x9, 0x7, &(0x7f0000000380)=""/125, 0x7d, 0x3, 0x1}, 0x7) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000440)={{0x0, 0x7, 0x100000001, 0x4, 0x5, 0x9, 0x1a, 0x67b1, 0x2, 0x5, 0x8, 0x80000000, 0x6, 0x8, 0x10000}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xf, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000000}, 0x8) 22:06:29 executing program 4: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)={0x40, [0x80, 0x1], 0x54}, 0x10) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e4, &(0x7f0000000040)="880320dd086b8e7d598343ea99715e3c44d0376ac606da91abaccf1ed4f52d70d8bdea90f889d4f1ef067408cb40cc59c6942ef2ab7c5d4d0de4fe6921d5eea7fb1df96b4d7fec2154eda85c708938855884e40c1b21f26f21a225de9aab61921c41433b5784f56a14328f61d599a3d745e8abcaa156e69b8764dfc8f3e102f553703a4fe4257a9c01e35bf5deeb1165702c16ad54ac6a249a1878e83693ce5c639b99836e07f3addc4f53d38f8e7efd8563023a09837d8b35767e111538b2385981576a0b97e860b0acdd972c") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x1, @any, 0xfff}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x6) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x8, 0x0, 0x5}}, 0x14) openat$cgroup_pressure(r2, &(0x7f0000000380)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_setup(0x3d36, &(0x7f00000003c0)={0x0, 0xa45c, 0x2, 0x3, 0x49}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4007, @fd=r1, 0x0, 0x0, 0x0, 0x4, 0x1, {0x1}}, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) get_robust_list(0x0, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000540)={&(0x7f0000000500)}, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)}}, &(0x7f0000000680)=0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0xc) 22:06:29 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000091}, 0x4800) write$cgroup_pressure(r0, &(0x7f0000000180)={'some', 0x20, 0x4, 0x20, 0x100000000}, 0x2f) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x840) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r4 = inotify_add_watch(r0, &(0x7f0000000640)='./file0\x00', 0x82) inotify_rm_watch(r2, r4) syz_genetlink_get_family_id$fou(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000700)={0x258, r1, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x1e, 0x34, @random="6e68485ba497026288aad1f5bc11e359724d9eb38e6e2ca52684"}, @NL80211_ATTR_IE={0x113, 0x2a, [@measure_req={0x26, 0x8d, {0x1, 0x1f, 0x1, "06f183fbf460dd2ee77d900be2a237e08e0c08777522720081967a6e9eeaeefc35ffb8e48ba141426aef09ad4be518194e370da562384273d9a35da0717e7f6994c6353900a17422e3b5fac5ff72e241bf4c3c2bdbfd5330078fb55727cb8a8db3ce6460a658bbc5751b89ad5f3a1c3932558fee000073d4f19dd7cab528e41796a5cc4d6af10b32def9"}}, @ssid={0x0, 0x5, @random="9fb8a191e2"}, @random={0x9, 0x6e, "bd3d521b3b7cf5047aa1186c64a095079c801ea6a59d089168f38492caa70724468fd2c5b6a9ca7d98e06499ed8108989053a986f6031f0a89e74cc468400a52816f5074677db2412e952fc36b2a6c0b32dc6c2c1b97b524f891aaac2828e93a05170a78b97617565a7b0d8afe44"}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x68}}]}, @NL80211_ATTR_IE={0x110, 0x2a, [@dsss={0x3, 0x1, 0xf548c78b052791a8}, @tim={0x5, 0x38, {0xc, 0x80, 0x8c, "a6d41cb7d71f404e94b5ed6efa5b640169551bbb1ba0e8548bfc02006bd446ab87355c816bf28d24709e5a08f8a955533b8081895d"}}, @mesh_id={0x72, 0x6}, @fast_bss_trans={0x37, 0x96, {0x20, 0x3, "39ffbfd097d4031887c5d54952453933", "5b625101dfd7ff404407e99b5339afefc9bcbc4d263217fdc4447049df567eef", "326ba263175860a524ee1d59bc0ef5060f69a98adb051e5a7b2c5acb5af61fdb", [{0x1, 0x15, "16b696c23fb086771268aeff2a5b9d0cd29e91dfcf"}, {0x73, 0x9, "b2dbe9c3f58195c437"}, {0x3, 0x20, "818b05b642f480b9e562faa709939f04856784582c64c04568db7c7030a48c33"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7, @void, @val=0x6, @val="25d935f630d8ea65124c4e6d350953ae"}}, @rann={0x7e, 0x15, {{0x0, 0x7}, 0x5, 0x7, @broadcast, 0x6, 0x2, 0x1f}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r5 = syz_io_uring_complete(0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xfffffff9, 0x5, 0x2, 0x4}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x4c010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x54}, 0x20000845) [ 183.734137] Bluetooth: hci5: command 0x0406 tx timeout [ 183.735276] Bluetooth: hci6: command 0x0406 tx timeout [ 183.736104] Bluetooth: hci3: command 0x0406 tx timeout [ 183.736928] Bluetooth: hci2: command 0x0406 tx timeout [ 183.737696] Bluetooth: hci4: command 0x0406 tx timeout [ 183.737936] Bluetooth: hci1: command 0x0406 tx timeout [ 183.738516] Bluetooth: hci7: command 0x0406 tx timeout [ 183.738933] Bluetooth: hci0: command 0x0406 tx timeout [ 184.245802] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 184.247069] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.247990] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.249279] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 184.250904] Call Trace: [ 184.251892] [ 184.252322] __schedule+0x893/0x2470 [ 184.253291] ? io_schedule_timeout+0x150/0x150 [ 184.253797] ? do_raw_spin_lock+0x121/0x260 [ 184.254257] ? rwlock_bug.part.0+0x90/0x90 [ 184.254711] schedule+0xda/0x1b0 [ 184.255111] rescuer_thread+0x851/0xdb0 [ 184.255542] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.256093] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.256631] ? lockdep_hardirqs_on+0x79/0x100 [ 184.257138] ? worker_thread+0x1260/0x1260 [ 184.257590] kthread+0x2ed/0x3a0 [ 184.257978] ? kthread_complete_and_exit+0x40/0x40 [ 184.258493] ret_from_fork+0x22/0x30 [ 184.258935] [ 184.259192] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 184.259883] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.260432] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.261230] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 184.262099] Call Trace: [ 184.262375] [ 184.262618] __schedule+0x893/0x2470 [ 184.263065] ? io_schedule_timeout+0x150/0x150 [ 184.263548] ? do_raw_spin_lock+0x121/0x260 [ 184.264034] ? rwlock_bug.part.0+0x90/0x90 [ 184.264505] schedule+0xda/0x1b0 [ 184.264902] rescuer_thread+0x851/0xdb0 [ 184.265282] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.265675] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.266092] ? lockdep_hardirqs_on+0x79/0x100 [ 184.266453] ? worker_thread+0x1260/0x1260 [ 184.266817] kthread+0x2ed/0x3a0 [ 184.267091] ? kthread_complete_and_exit+0x40/0x40 [ 184.267486] ret_from_fork+0x22/0x30 [ 184.267820] [ 184.268018] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 184.268527] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.268957] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.269527] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 184.270173] Call Trace: [ 184.270377] [ 184.270557] __schedule+0x893/0x2470 [ 184.270876] ? io_schedule_timeout+0x150/0x150 [ 184.271234] ? do_raw_spin_lock+0x121/0x260 [ 184.271569] ? rwlock_bug.part.0+0x90/0x90 [ 184.271922] schedule+0xda/0x1b0 [ 184.272190] rescuer_thread+0x851/0xdb0 [ 184.272511] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.272921] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.273308] ? lockdep_hardirqs_on+0x79/0x100 [ 184.273664] ? worker_thread+0x1260/0x1260 [ 184.274015] kthread+0x2ed/0x3a0 [ 184.274281] ? kthread_complete_and_exit+0x40/0x40 [ 184.274666] ret_from_fork+0x22/0x30 [ 184.274987] [ 184.275171] INFO: task netns:6 blocked for more than 143 seconds. [ 184.275630] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.276070] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.276662] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 184.277314] Call Trace: [ 184.277516] [ 184.277702] __schedule+0x893/0x2470 [ 184.278016] ? io_schedule_timeout+0x150/0x150 [ 184.278374] ? do_raw_spin_lock+0x121/0x260 [ 184.278710] ? rwlock_bug.part.0+0x90/0x90 [ 184.279064] schedule+0xda/0x1b0 [ 184.279333] rescuer_thread+0x851/0xdb0 [ 184.279642] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.280042] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.280435] ? lockdep_hardirqs_on+0x79/0x100 [ 184.280801] ? worker_thread+0x1260/0x1260 [ 184.281136] kthread+0x2ed/0x3a0 [ 184.281407] ? kthread_complete_and_exit+0x40/0x40 [ 184.281808] ret_from_fork+0x22/0x30 [ 184.282114] [ 184.282301] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 184.282810] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.283213] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.283803] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 184.284445] Workqueue: 0x0 (cgroup_destroy) [ 184.284807] Call Trace: [ 184.285005] [ 184.285188] __schedule+0x893/0x2470 [ 184.285493] ? io_schedule_timeout+0x150/0x150 [ 184.285879] schedule+0xda/0x1b0 [ 184.286149] worker_thread+0x15f/0x1260 [ 184.286473] ? process_one_work+0x16a0/0x16a0 [ 184.286846] kthread+0x2ed/0x3a0 [ 184.287122] ? kthread_complete_and_exit+0x40/0x40 [ 184.287503] ret_from_fork+0x22/0x30 [ 184.287829] [ 184.288013] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 184.288527] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.288951] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.289536] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 184.290182] Workqueue: 0x0 (kblockd) [ 184.290484] Call Trace: [ 184.290681] [ 184.290886] __schedule+0x893/0x2470 [ 184.291189] ? io_schedule_timeout+0x150/0x150 [ 184.291556] schedule+0xda/0x1b0 [ 184.291841] worker_thread+0x15f/0x1260 [ 184.292163] ? process_one_work+0x16a0/0x16a0 [ 184.292536] kthread+0x2ed/0x3a0 [ 184.292824] ? kthread_complete_and_exit+0x40/0x40 [ 184.293204] ret_from_fork+0x22/0x30 [ 184.293509] [ 184.293691] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 184.294216] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.294617] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.295209] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 184.295853] Call Trace: [ 184.296064] [ 184.296252] __schedule+0x893/0x2470 [ 184.296558] ? io_schedule_timeout+0x150/0x150 [ 184.296933] ? do_raw_spin_lock+0x121/0x260 [ 184.297269] ? rwlock_bug.part.0+0x90/0x90 [ 184.297602] schedule+0xda/0x1b0 [ 184.297895] rescuer_thread+0x851/0xdb0 [ 184.298218] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.298602] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.299009] ? lockdep_hardirqs_on+0x79/0x100 [ 184.299369] ? worker_thread+0x1260/0x1260 [ 184.299699] kthread+0x2ed/0x3a0 [ 184.299987] ? kthread_complete_and_exit+0x40/0x40 [ 184.300378] ret_from_fork+0x22/0x30 [ 184.300679] [ 184.300879] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 184.301413] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.301835] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.302417] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 184.303058] Call Trace: [ 184.303259] [ 184.303439] __schedule+0x893/0x2470 [ 184.303741] ? io_schedule_timeout+0x150/0x150 [ 184.304114] ? mark_held_locks+0x9e/0xe0 [ 184.304455] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.304858] schedule+0xda/0x1b0 [ 184.305129] rcu_tasks_one_gp+0x3db/0xc10 [ 184.305469] rcu_tasks_kthread+0x80/0xa0 [ 184.305804] ? rcu_tasks_postscan+0x10/0x10 [ 184.306139] kthread+0x2ed/0x3a0 [ 184.306409] ? kthread_complete_and_exit+0x40/0x40 [ 184.306813] ret_from_fork+0x22/0x30 [ 184.307121] [ 184.307306] INFO: task kworker/0:1:12 blocked for more than 143 seconds. [ 184.307817] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.308230] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.308838] task:kworker/0:1 state:I stack:27232 pid:12 ppid:2 flags:0x00004000 [ 184.309468] Workqueue: 0x0 (cgwb_release) [ 184.309814] Call Trace: [ 184.310014] [ 184.310197] __schedule+0x893/0x2470 [ 184.310508] ? io_schedule_timeout+0x150/0x150 [ 184.310882] ? rwlock_bug.part.0+0x90/0x90 [ 184.311224] schedule+0xda/0x1b0 [ 184.311502] worker_thread+0x15f/0x1260 [ 184.311842] ? __kthread_parkme+0x15a/0x220 [ 184.312182] ? process_one_work+0x16a0/0x16a0 [ 184.312565] kthread+0x2ed/0x3a0 [ 184.312852] ? kthread_complete_and_exit+0x40/0x40 [ 184.313235] ret_from_fork+0x22/0x30 [ 184.313543] [ 184.313729] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 184.314257] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.314654] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.315250] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 184.315900] Workqueue: 0x0 (events_highpri) [ 184.316257] Call Trace: [ 184.316454] [ 184.316631] __schedule+0x893/0x2470 [ 184.316946] ? io_schedule_timeout+0x150/0x150 [ 184.317310] schedule+0xda/0x1b0 [ 184.317576] worker_thread+0x15f/0x1260 [ 184.317914] ? process_one_work+0x16a0/0x16a0 [ 184.318268] kthread+0x2ed/0x3a0 [ 184.318539] ? kthread_complete_and_exit+0x40/0x40 [ 184.318935] ret_from_fork+0x22/0x30 [ 184.319272] [ 184.319518] [ 184.319518] Showing all locks held in the system: [ 184.320010] 1 lock held by rcu_tasks_kthre/11: [ 184.320368] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 184.321142] 1 lock held by khungtaskd/25: [ 184.321457] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 184.322174] 1 lock held by rs:main Q:Reg/198: [ 184.322520] 2 locks held by syz-executor/4502: [ 184.322881] [ 184.323016] ============================================= [ 184.323016] VM DIAGNOSIS: 22:06:30 Registers: info registers vcpu 0 RAX=ffffed100133150e RBX=ffffed100133150f RCX=ffffffff812a91df RDX=0000000000000001 RSI=0000000000000004 RDI=ffff88800998a870 RBP=ffffed100133150e RSP=ffff888038337b00 R8 =0000000000000000 R9 =ffff88800998a873 R10=ffffed100133150e R11=0000000000000001 R12=000000000003fb7c R13=000000000003fb7b R14=000000000000fb7c R15=ffff88800998a870 RIP=ffffffff8178776f RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555556ec3400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd19edfd88 CR3=0000000036744000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 000000020000000e 000055b0f0f31fa0 YMM02=0000000000000000 0000000000000000 ffffff0f0e0d0c0b 0a09080706050403 YMM03=0000000000000000 0000000000000000 696e656420737365 636341002f737973 YMM04=0000000000000000 0000000000000000 323d44455a494c41 4954494e495f4345 YMM05=0000000000000000 0000000000000000 3d5145534b534944 006b7369643d4550 YMM06=0000000000000000 0000000000000000 3d454d414e564544 00303d444955555f YMM07=0000000000000000 0000000000000000 5953425553003370 6f6f6c2f6b636f6c YMM08=0000000000000000 0000000000000000 49006d756e203c20 69000a313a56000a YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000020002000 0000000020000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f8a0 R8 =0000000000000001 R9 =ffff88800902f82b R10=ffffed1001205f05 R11=0000000000000001 R12=0000000000000028 R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb0c1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b0f0f51ed0 CR3=0000000018abc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4153f21200000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000