Warning: Permanently added '[localhost]:47528' (ECDSA) to the list of known hosts. 2022/10/02 13:55:43 fuzzer started 2022/10/02 13:55:43 dialing manager at localhost:35095 syzkaller login: [ 36.396702] cgroup: Unknown subsys name 'net' [ 36.494628] cgroup: Unknown subsys name 'rlimit' 2022/10/02 13:55:59 syscalls: 215 2022/10/02 13:55:59 code coverage: enabled 2022/10/02 13:55:59 comparison tracing: enabled 2022/10/02 13:55:59 extra coverage: enabled 2022/10/02 13:55:59 setuid sandbox: enabled 2022/10/02 13:55:59 namespace sandbox: enabled 2022/10/02 13:55:59 Android sandbox: enabled 2022/10/02 13:55:59 fault injection: enabled 2022/10/02 13:55:59 leak checking: enabled 2022/10/02 13:55:59 net packet injection: enabled 2022/10/02 13:55:59 net device setup: enabled 2022/10/02 13:55:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 13:55:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 13:55:59 USB emulation: enabled 2022/10/02 13:55:59 hci packet injection: enabled 2022/10/02 13:55:59 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 13:55:59 802.15.4 emulation: enabled 2022/10/02 13:55:59 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 13:56:00 starting 8 fuzzer processes 13:56:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x28000, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb4, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x52, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x1f, @device_a, 0x8001, "", 0x7, 0x3, @broadcast, 0x80}}, @mic={0x8c, 0x10, {0x676, "b61442fa8f6c", @short="8f280ba380db9d75"}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x3, 0x7, 0x0, {0x4, 0xb69, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x7}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x3, 0x1, 0xc5cd, 0x1}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa0, r9, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c8040}, 0x0) 13:56:00 executing program 1: socketpair(0x2a, 0xa, 0xd38, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000080)=0x1c) r2 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x400, 0x5a5b, 0x100, 0x5922, 0x42000000}) r3 = accept$inet6(r2, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$inet6(r3, &(0x7f0000000b00)={&(0x7f0000000200)={0xa, 0x4e22, 0x10001, @private0, 0x9437}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="5a4c1617054eabbd798345fedbfdda079ea1fbf8b00b4818f2f796d534e40adb7833c91fce67eca6023f5d092dff7cbe6601dd2ebfffce4f2eb5f895c7e6b51b83edb3898b45cf8de80aa27a046b9836ff0115c8657c4909f40d7c51d5cd62d2fd7dbd7145da1c352914574bd939944a707dbfbcc1f6dceece07a9f97a415f826343fd0ccc5019b54647b839e034a2723eb9e64c3f3d60fc33c37aab413682f2e67e7d0ae7404b3ab0a8db50414197281973d3627a59407c8ad702308a1840f0c567e7e1860c9b8d5ef8f7b3456d856d094c1f1095ab81fde83fe1422c633e8e1a637c713f696d0e8a", 0xe9}, {&(0x7f0000000340)="7437f0a44b5ec4181c75b3df126a443f767e9aab53cca195589dda9564c36e02957615d48e5301041fc98711de109d3ba1e31a25d4f58b01566e1605c6f17d9aa75d061b458303d8abb152ca7e267b53db8b71e562cd72ea4484a56a3e49931f98fbb022a93c67a8077745231b6ad1fa073a0f0c9471263daa2674cfa199c881446023efd329763149b7d2e7a2e0e619901cd254a8062324d97ff8d70b29410f9009bdd2866cf3d14c74fbf64791dc570c4e361f2c992af95aa542e79a2c1b7bc21937d33580a84d8f7d548f3a755bcf23580f9546e97316b112eaeb3cb66f9c83", 0xe1}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="1205a6350d8e00b8f3e6afe9dde3fab54143ec445278a0ea830f9eba200102d0ba212c3fe18fcd03f471532d7a68115535512147bd04c04b72399ccd2a56bdf60c47b02bbe5521d97c65735a42b16a49a81104790907415333b91e114af09131263d5019346a785dc4b7f9e55ee1c3a78ca1c8a37f7a04ec813f3a56f15775", 0x7f}], 0x4, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xbc}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1]}}}, @hopopts={{0x148, 0x29, 0x36, {0x0, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x80, 0x67, "ca120d7020235704a668cd7d27e2fdf65c3f1d4dd2e4121bd2b218a7487f0cb6ea7350d0bd98c2516b15bf5ec7243ba5fa92555f8aab5252db0c4b86362a80b405650ce135f640f29ab58121341538b94d6fe87b6067ab0956212f6ae51a87e52377673010ed16"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @ra={0x5, 0x2, 0xc2}, @generic={0x20, 0x94, "afb02921136364ad4399b80da57da1dcf0cc1126e17fea059b6f04b0fbdf04cc9897beed1e822a1a4462380d28f9ebcef1eab485d72d030adffc65b008aef75e8dd57e9fba4d8faae60ab19eec4409a008aab2e2f9adedaa0499c98a3f3f3f1d3b2b6e084f9eb6a6fed85e3afe3ae775e31782606bfbad066099da02fc06c6a76b0e898ae0402c49d8b3e5c0223c0fe8b1d68dd1"}, @jumbo={0xc2, 0x4, 0x7}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x2, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x20, 0x0, [@private1, @mcast1, @private0, @mcast1, @empty]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x70}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x89, 0xe, 0x2, 0x50, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @local, @mcast1, @private0, @remote]}}}], 0x328}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x5b}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8387}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000dc0)={'NETMAP\x00'}, &(0x7f0000000e00)=0x1e) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000e40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, r4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) r7 = socket$inet6(0xa, 0xa, 0x7fffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ec0)={'filter\x00', 0x47, "64d0dede0f13d257fae67c71976ab628694e51122567e354c882e533b4d50c794da1746bb99a83b5ebb9d6e95d1eca8d40937dbe8346903e60c8c33014438ff07fc67733e14780"}, &(0x7f0000000f40)=0x6b) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f80), 0x4443c2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001880)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x1000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, 0x1c, &(0x7f0000001000), 0x0, &(0x7f0000001040)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x3ff}, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x2, [0x9, 0x6, 0x401, 0x195, 0x8, 0x6, 0x8]}}, @pad1, @ra={0x5, 0x2, 0xfffa}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x6, 0x7, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x2000000}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x11, 0x8, 0x0, 0x1, 0x0, [@local, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x148}}, {{&(0x7f00000011c0)={0xa, 0x4e22, 0x1, @private0, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001200)="b9a06892e227848078f4eff64be91470a569fb", 0x13}, {&(0x7f0000001240)="dc172e03cf4a0cc63ded4412f8e4394c0da12d11ed6e18987d275fcae6087b04f0f2f31bd9baf0459da7e6f3766d289a66081a2b47f10190324a81d34d2c0346e9d32c5d0da26ed65b9bb13504d0daa288550bc46ffbd1391591a571f7d0828931a3ff86190ee2cf1c7758c9c0fb83fdefcfe91e8a62c6e4555a03ce47a15087eb1f15272fd09b6c7e385b8edaebbbf4c3afa1a99885bf39b161fe7636c5395504dd6d36bd321490c36a1fb75bf4a5fd495566f6c2e80edc426f17ad80dfa293dd836dec369d6c0c79e3630333e3be3afc93261136db130f6e", 0xd9}, {&(0x7f0000001340)="10c14a6bcad6625ce7057119bb76e484d47cec6de884320af4e5b65da876985e35681e", 0x23}, {&(0x7f0000001380)="fe08bade35106d88b70a39d9a836edae6f29ea4cbca431f415ad614af75eb3f0f6f693d2a1cc6d8aa1ac", 0x2a}, {&(0x7f00000013c0)="359f73a8dfd5afa34e6368342786f42cace0f7477bf40a2216d4c23b009ac460e48e6a8ab21503e241569ee55f39b50c4ee896474cc3a17130461d080fccf8fcacb016d1ea5ea3190a9e765cd65ffd86d28f8057b4ead46bd0ef11285a7e1b890de8dec622aa909c8c5bf59590fee11700b936", 0x73}, {&(0x7f0000001440)="5d5c64b40797bf0ac481b8b9512417ef9654e16930d404cfded44f879743c61336", 0x21}], 0x6, &(0x7f0000001500)=[@hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0x81, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hoplimit={{0x14}}, @hopopts_2292={{0x160, 0x29, 0x36, {0x87, 0x28, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x3, 0xad, "cec602440206dc2d40b6300812b081256ede1124f0f96f54e600bb22d793a71771f2611c089cba691bb02d59eb377240f33687792c36c9c19e3cfcbd6d5afd21ca1f2f9ab1dd44730119ef16a834bbdc3aef57a5e7ee1748fded9fa431aaa44fe8b6b2856ad2438897eddbaaac9ea5ec649e1a70e57586816273e1143bd4c51967f8280c2a9961d8839f56c5fa49cef39672f659798e908c4eb25cb8d83e25d2657058c2f9950052dcc31f70b5"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @calipso={0x7, 0x28, {0x2, 0x8, 0xfe, 0xaedd, [0x6, 0x5e63, 0x2, 0x1e92]}}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x1000, [0x6, 0x8]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x28}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x260}}, {{&(0x7f0000001780)={0xa, 0x4e21, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000017c0)="a75061be3e84651071f78ceb6be658a6b9c5fb144448", 0x16}], 0x1, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x3, 0x1) r9 = socket$inet6(0xa, 0x80000, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) 13:56:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xbc4, 0x400040) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8050) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x540041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x100, 0xfffffffa, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x41) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40408c0}, 0x4011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x2, 0x0, 0x0, 0x9, 0xfff, 0x2}, 0x20) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}]}, 0x2c}}, 0x40090) 13:56:00 executing program 3: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xfffffff7}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x4000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6, 0x17, 0x18, "fcbbdc5da02bc68cde1e0c064328f93108cb5ec9bc23e2f54861e7edc5b2869e739cd3f6c53905f043dc96c4965e5e395b42edc8b0ddc04cbdf586b766f1b231", "66ac799530dc990859cbf22a916d1f6a3b2ecbcf3bfd470108c17b9ee20364eb6db8b9a37561f03359dae5a09ccb92798b240f83083cc73048a7fd0d0580bbb9", "4015a42b6a3d825f424f64df3ea1bcf7f4818debcf3c18e5ff40bcd6ca5f450f", [0x6, 0x9]}) r4 = epoll_create(0x8001) epoll_pwait(r4, &(0x7f00000003c0)=[{}, {}], 0x2, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4a8e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5296}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r6 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@alg, &(0x7f0000000640)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0x2, [{}, {}]}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d8, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0x3, 0x3, 0xc3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x67]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x80, 0x0, 0x4, 0x1, 0x2, 0xffc0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x2, 0x1b}, {0x6, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x2}, {}, {0x5, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x7f3, 0xb6, 0x8a, 0x7, 0x3ff, 0x8e]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x11}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xb, 0xc, 0x4, 0x18, 0x6, 0x60, 0x48, 0xb, 0x24, 0x3, 0x60, 0x2, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x18, 0x5, 0x6c, 0x5, 0x30, 0x12, 0x1, 0x4, 0x30, 0x6c, 0x6c]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf9}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x18}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e23, 0x54, 0x4e24, 0x9, 0xa, 0x20, 0x80, 0x2e, r8}, {0x10001, 0x100000001, 0x2b, 0x2, 0x3f, 0x3, 0x5, 0x5}, {0xfff, 0x211, 0x7f, 0x80}, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x4, 0x0, 0x80, 0x5, 0x0, 0x8c2}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000801) [ 52.160473] audit: type=1400 audit(1664718960.287:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:56:00 executing program 4: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x3f, 0x5, 0x7, 0x80, 0x4, 0x66}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0x40, 0x5, 0x8, 0x2, @lba=0x1f, 0x64}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0100, 0x0) ioctl$CDROMSTOP(r0, 0x5307) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) syz_io_uring_setup(0x38d5, &(0x7f0000000340)={0x0, 0x627c, 0x2, 0x3, 0x2e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x101) r5 = openat$cgroup_procs(r0, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r0, r3, r4, r1, r0, r0, r5, r1, r0, r6], 0xa, 0x0, 0x1}, 0x7) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x3ff) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000540)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000580)=@hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x100}]}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e24, 0x124c7730, @loopback, 0x7fffffff}}, {{0xa, 0x4e21, 0x10000, @mcast1, 0x4}}}, 0x108) 13:56:00 executing program 5: kexec_load(0x6, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="f667b1b3f1bc4177a51349046074ffa1a4054dc74e6ddbcd5c407e7ae086ff16f2da30fe130b4c73f5e6cc8106cc1c68a5197e04b12316cf41e4fffb6d3d1eb41d478a2c2fd72d", 0x47, 0x772, 0x40}, {&(0x7f0000000080)="6e2b5929bead3d63135b9e8c5c9fd8e4106119a009cf2a6895b8386daf7b5029cf026fdc7ed049a86b66a551ba577cb1f62c598ce8562f6f", 0x38, 0x0, 0x71}], 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}}, 0x8000) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x8, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000340)=[0xee00, r0, r1, 0xffffffffffffffff, 0x0]) kexec_load(0x9, 0x2, &(0x7f0000000500)=[{&(0x7f0000000380)="3882b494cc1e13d8d7c449d2bc2e7fd14576288db3fb49d7ba1fd74e1973fcfc732cd05df59a3739e3ddbbfcedff01e439bc789a65e8c3c72abd975b51054af98436f31fc752c7285539bb7706b078e66bceaff23b6bb2c06266e733ddce0ac722609fa1d12058b59a94cdd4ac362dcf961cf95085eea2c865dd5917dcbf280394c767b552a71567faade9912e643a26fc870e8b8fa57ec0350bf1155174305ff93cd42ee4c988e0972ab580", 0xac, 0xffffffffffffffac, 0x7}, {&(0x7f0000000440)="cf603add9597ed4e41afe4be7501fffcec0c53bfa0c39b695061615c5500607281b6935d1b5b9d2304d0613b41b724e5cb922b5c15f2ac25ae189ed20a5c2c03085b0d9782a8deacad9701e0ba8e72c25ae63fe2e8c472bc7ad001e8e4534402931d2160d25c53136d31c1f3d223eecb49e3aa98c182aba3d3c8dde6e12da09590adb92f76a7f882c1d80e658a67cc7884e6c92cd2a73a03b1d3", 0x9a, 0x2, 0x100}], 0x280000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x1) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x300, 0x7fff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9db558ee3dd9f22e4f09e05d220fa666b203fc13a0b0865"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d90b29ef987df2b99f407e4c58f4fd022469e4f4c504b109"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x50004}, 0x20000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c8e4}, 0x24048804) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000801) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000cc0)) 13:56:00 executing program 7: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/96, &(0x7f0000000080)=0x60) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = accept(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x1}}, @xdp={0x2c, 0x2, 0x0, 0x12}, @l2={0x1f, 0xff45, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='wlan1\x00', 0x7, 0xeb, 0x2}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) r3 = socket$inet6(0xa, 0x2, 0x8) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008480) socketpair(0x21, 0x6, 0x20, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5fb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb55b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004845}, 0x40840) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0100, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r9 = socket$inet6(0xa, 0x6, 0x3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r9, &(0x7f0000000900)={0xffffffffffffffff, r6, 0x8}) 13:56:00 executing program 6: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x40, 0x2, [0x0, 0x4, 0x7f, 0x5, 0xb00b, 0x1f]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3f, [0x6]}}, @pad1]}, 0x58) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x90d5, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@local, @local, @local, 0x7, 0xe31d, 0x4, 0x100, 0x80000001, 0x4, r2}) r3 = accept(r1, &(0x7f0000000300)=@ethernet, &(0x7f0000000380)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x2, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x47, r2}) connect$802154_dgram(r3, &(0x7f0000000600)={0x24, @long={0x3, 0xffff}}, 0x14) r5 = accept4$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000006c0)=""/58, &(0x7f0000000700)=0x3a) accept4$inet6(r0, 0x0, &(0x7f0000000740), 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f00000007c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40941) [ 53.398709] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.404072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.407198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.417755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.419294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.422621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.449408] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.456838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.458836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.460303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.461412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.462930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.463954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.465142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.466231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.467512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.468526] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.474653] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.475309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.477251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.477325] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.479716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.481765] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.483654] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 53.483889] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.485589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.486077] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.487612] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.488491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 53.493313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.495214] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.503277] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.510005] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.511388] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.512562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.514501] Bluetooth: hci5: HCI_REQ-0x0c1a [ 53.515701] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.522034] Bluetooth: hci4: HCI_REQ-0x0c1a [ 53.525441] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.544105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.549007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.554466] Bluetooth: hci3: HCI_REQ-0x0c1a [ 53.554703] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.562368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.565134] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 53.584395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 53.586566] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 53.588029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 53.592433] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.544433] Bluetooth: hci0: command 0x0409 tx timeout [ 55.545569] Bluetooth: hci4: command 0x0409 tx timeout [ 55.546294] Bluetooth: hci1: command 0x0409 tx timeout [ 55.547020] Bluetooth: hci2: command 0x0409 tx timeout [ 55.547690] Bluetooth: hci5: command 0x0409 tx timeout [ 55.548672] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 55.607882] Bluetooth: hci7: command 0x0409 tx timeout [ 55.608747] Bluetooth: hci3: command 0x0409 tx timeout [ 57.592631] Bluetooth: hci5: command 0x041b tx timeout [ 57.593143] Bluetooth: hci2: command 0x041b tx timeout [ 57.593554] Bluetooth: hci1: command 0x041b tx timeout [ 57.594003] Bluetooth: hci4: command 0x041b tx timeout [ 57.594422] Bluetooth: hci0: command 0x041b tx timeout [ 57.655971] Bluetooth: hci3: command 0x041b tx timeout [ 57.656473] Bluetooth: hci7: command 0x041b tx timeout [ 59.640007] Bluetooth: hci0: command 0x040f tx timeout [ 59.640861] Bluetooth: hci4: command 0x040f tx timeout [ 59.641626] Bluetooth: hci1: command 0x040f tx timeout [ 59.642436] Bluetooth: hci2: command 0x040f tx timeout [ 59.643266] Bluetooth: hci5: command 0x040f tx timeout [ 59.703872] Bluetooth: hci7: command 0x040f tx timeout [ 59.704652] Bluetooth: hci3: command 0x040f tx timeout [ 60.536034] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 61.687917] Bluetooth: hci5: command 0x0419 tx timeout [ 61.688384] Bluetooth: hci2: command 0x0419 tx timeout [ 61.688817] Bluetooth: hci1: command 0x0419 tx timeout [ 61.689220] Bluetooth: hci4: command 0x0419 tx timeout [ 61.689608] Bluetooth: hci0: command 0x0419 tx timeout [ 61.751835] Bluetooth: hci3: command 0x0419 tx timeout [ 61.752244] Bluetooth: hci7: command 0x0419 tx timeout [ 63.080721] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.081760] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.083835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.085318] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.086196] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 63.086929] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.101052] Bluetooth: hci6: HCI_REQ-0x0c1a [ 65.143852] Bluetooth: hci6: command 0x0409 tx timeout [ 67.191998] Bluetooth: hci6: command 0x041b tx timeout [ 69.239827] Bluetooth: hci6: command 0x040f tx timeout [ 71.287859] Bluetooth: hci6: command 0x0419 tx timeout [ 111.214135] audit: type=1400 audit(1664719019.341:7): avc: denied { create } for pid=3807 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 115.152670] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.164112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.165723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.168983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.170823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.172714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.178150] Bluetooth: hci2: HCI_REQ-0x0c1a [ 116.855893] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 116.983882] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 117.239884] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 117.241565] Bluetooth: hci2: command 0x0409 tx timeout [ 119.100625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.102508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.105104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.108138] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.111000] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.112362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.119169] Bluetooth: hci1: HCI_REQ-0x0c1a [ 119.287856] Bluetooth: hci2: command 0x041b tx timeout [ 119.419608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.422375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.424687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.440378] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.442758] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 119.445094] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.452393] Bluetooth: hci7: HCI_REQ-0x0c1a [ 121.015839] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 121.143920] Bluetooth: hci1: command 0x0409 tx timeout [ 121.335830] Bluetooth: hci2: command 0x040f tx timeout [ 121.463854] Bluetooth: hci7: command 0x0409 tx timeout [ 123.191897] Bluetooth: hci1: command 0x041b tx timeout [ 123.383822] Bluetooth: hci2: command 0x0419 tx timeout [ 123.511838] Bluetooth: hci7: command 0x041b tx timeout [ 125.239813] Bluetooth: hci1: command 0x040f tx timeout [ 125.303860] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 125.559960] Bluetooth: hci7: command 0x040f tx timeout [ 127.287836] Bluetooth: hci1: command 0x0419 tx timeout [ 127.607853] Bluetooth: hci7: command 0x0419 tx timeout [ 127.641374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.644831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.646575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.648937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.649879] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 127.651531] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.653960] Bluetooth: hci0: HCI_REQ-0x0c1a [ 129.719854] Bluetooth: hci0: command 0x0409 tx timeout [ 131.767868] Bluetooth: hci0: command 0x041b tx timeout [ 133.815841] Bluetooth: hci0: command 0x040f tx timeout [ 135.863822] Bluetooth: hci0: command 0x0419 tx timeout 13:57:52 executing program 7: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/96, &(0x7f0000000080)=0x60) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = accept(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x1}}, @xdp={0x2c, 0x2, 0x0, 0x12}, @l2={0x1f, 0xff45, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='wlan1\x00', 0x7, 0xeb, 0x2}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) r3 = socket$inet6(0xa, 0x2, 0x8) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008480) socketpair(0x21, 0x6, 0x20, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5fb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb55b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004845}, 0x40840) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0100, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r9 = socket$inet6(0xa, 0x6, 0x3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r9, &(0x7f0000000900)={0xffffffffffffffff, r6, 0x8}) 13:57:52 executing program 3: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xfffffff7}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x4000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6, 0x17, 0x18, "fcbbdc5da02bc68cde1e0c064328f93108cb5ec9bc23e2f54861e7edc5b2869e739cd3f6c53905f043dc96c4965e5e395b42edc8b0ddc04cbdf586b766f1b231", "66ac799530dc990859cbf22a916d1f6a3b2ecbcf3bfd470108c17b9ee20364eb6db8b9a37561f03359dae5a09ccb92798b240f83083cc73048a7fd0d0580bbb9", "4015a42b6a3d825f424f64df3ea1bcf7f4818debcf3c18e5ff40bcd6ca5f450f", [0x6, 0x9]}) r4 = epoll_create(0x8001) epoll_pwait(r4, &(0x7f00000003c0)=[{}, {}], 0x2, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4a8e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5296}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r6 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@alg, &(0x7f0000000640)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0x2, [{}, {}]}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d8, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0x3, 0x3, 0xc3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x67]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x80, 0x0, 0x4, 0x1, 0x2, 0xffc0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x2, 0x1b}, {0x6, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x2}, {}, {0x5, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x7f3, 0xb6, 0x8a, 0x7, 0x3ff, 0x8e]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x11}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xb, 0xc, 0x4, 0x18, 0x6, 0x60, 0x48, 0xb, 0x24, 0x3, 0x60, 0x2, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x18, 0x5, 0x6c, 0x5, 0x30, 0x12, 0x1, 0x4, 0x30, 0x6c, 0x6c]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf9}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x18}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e23, 0x54, 0x4e24, 0x9, 0xa, 0x20, 0x80, 0x2e, r8}, {0x10001, 0x100000001, 0x2b, 0x2, 0x3f, 0x3, 0x5, 0x5}, {0xfff, 0x211, 0x7f, 0x80}, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x4, 0x0, 0x80, 0x5, 0x0, 0x8c2}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000801) 13:57:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xbc4, 0x400040) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8050) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x540041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x100, 0xfffffffa, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x41) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40408c0}, 0x4011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x2, 0x0, 0x0, 0x9, 0xfff, 0x2}, 0x20) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}]}, 0x2c}}, 0x40090) 13:57:52 executing program 6: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x40, 0x2, [0x0, 0x4, 0x7f, 0x5, 0xb00b, 0x1f]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3f, [0x6]}}, @pad1]}, 0x58) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x90d5, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@local, @local, @local, 0x7, 0xe31d, 0x4, 0x100, 0x80000001, 0x4, r2}) r3 = accept(r1, &(0x7f0000000300)=@ethernet, &(0x7f0000000380)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x2, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x47, r2}) connect$802154_dgram(r3, &(0x7f0000000600)={0x24, @long={0x3, 0xffff}}, 0x14) r5 = accept4$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000006c0)=""/58, &(0x7f0000000700)=0x3a) accept4$inet6(r0, 0x0, &(0x7f0000000740), 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f00000007c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40941) 13:57:52 executing program 5: kexec_load(0x6, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="f667b1b3f1bc4177a51349046074ffa1a4054dc74e6ddbcd5c407e7ae086ff16f2da30fe130b4c73f5e6cc8106cc1c68a5197e04b12316cf41e4fffb6d3d1eb41d478a2c2fd72d", 0x47, 0x772, 0x40}, {&(0x7f0000000080)="6e2b5929bead3d63135b9e8c5c9fd8e4106119a009cf2a6895b8386daf7b5029cf026fdc7ed049a86b66a551ba577cb1f62c598ce8562f6f", 0x38, 0x0, 0x71}], 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}}, 0x8000) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x8, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000340)=[0xee00, r0, r1, 0xffffffffffffffff, 0x0]) kexec_load(0x9, 0x2, &(0x7f0000000500)=[{&(0x7f0000000380)="3882b494cc1e13d8d7c449d2bc2e7fd14576288db3fb49d7ba1fd74e1973fcfc732cd05df59a3739e3ddbbfcedff01e439bc789a65e8c3c72abd975b51054af98436f31fc752c7285539bb7706b078e66bceaff23b6bb2c06266e733ddce0ac722609fa1d12058b59a94cdd4ac362dcf961cf95085eea2c865dd5917dcbf280394c767b552a71567faade9912e643a26fc870e8b8fa57ec0350bf1155174305ff93cd42ee4c988e0972ab580", 0xac, 0xffffffffffffffac, 0x7}, {&(0x7f0000000440)="cf603add9597ed4e41afe4be7501fffcec0c53bfa0c39b695061615c5500607281b6935d1b5b9d2304d0613b41b724e5cb922b5c15f2ac25ae189ed20a5c2c03085b0d9782a8deacad9701e0ba8e72c25ae63fe2e8c472bc7ad001e8e4534402931d2160d25c53136d31c1f3d223eecb49e3aa98c182aba3d3c8dde6e12da09590adb92f76a7f882c1d80e658a67cc7884e6c92cd2a73a03b1d3", 0x9a, 0x2, 0x100}], 0x280000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x1) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x300, 0x7fff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9db558ee3dd9f22e4f09e05d220fa666b203fc13a0b0865"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d90b29ef987df2b99f407e4c58f4fd022469e4f4c504b109"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x50004}, 0x20000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c8e4}, 0x24048804) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000801) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000cc0)) 13:57:52 executing program 1: socketpair(0x2a, 0xa, 0xd38, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000080)=0x1c) r2 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x400, 0x5a5b, 0x100, 0x5922, 0x42000000}) r3 = accept$inet6(r2, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$inet6(r3, &(0x7f0000000b00)={&(0x7f0000000200)={0xa, 0x4e22, 0x10001, @private0, 0x9437}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="5a4c1617054eabbd798345fedbfdda079ea1fbf8b00b4818f2f796d534e40adb7833c91fce67eca6023f5d092dff7cbe6601dd2ebfffce4f2eb5f895c7e6b51b83edb3898b45cf8de80aa27a046b9836ff0115c8657c4909f40d7c51d5cd62d2fd7dbd7145da1c352914574bd939944a707dbfbcc1f6dceece07a9f97a415f826343fd0ccc5019b54647b839e034a2723eb9e64c3f3d60fc33c37aab413682f2e67e7d0ae7404b3ab0a8db50414197281973d3627a59407c8ad702308a1840f0c567e7e1860c9b8d5ef8f7b3456d856d094c1f1095ab81fde83fe1422c633e8e1a637c713f696d0e8a", 0xe9}, {&(0x7f0000000340)="7437f0a44b5ec4181c75b3df126a443f767e9aab53cca195589dda9564c36e02957615d48e5301041fc98711de109d3ba1e31a25d4f58b01566e1605c6f17d9aa75d061b458303d8abb152ca7e267b53db8b71e562cd72ea4484a56a3e49931f98fbb022a93c67a8077745231b6ad1fa073a0f0c9471263daa2674cfa199c881446023efd329763149b7d2e7a2e0e619901cd254a8062324d97ff8d70b29410f9009bdd2866cf3d14c74fbf64791dc570c4e361f2c992af95aa542e79a2c1b7bc21937d33580a84d8f7d548f3a755bcf23580f9546e97316b112eaeb3cb66f9c83", 0xe1}, {&(0x7f0000000440)="46df78015feaa33b5764d9eb5e9092003ae000a32fd0d030f6a7eb44e61e6eb7d317607db9869ac95e4c8ce8be94dd99744db06515a54fa56342cf2a707a84412923f3fd6bb3f53bc26bccdc6a2327d91d3f8489e97a7485d5b6b9fba3348c29245764150df6619ee059e2ba66d01a77ad00414486b9107599fe065ab20007df1b4c8317d0b3e20ea0d7500219b8e40a6ebf546df7b234bfa66169acf7e142aeae8f6ad649f23e66c7386ffc654e3c9b239c494499355ed426ffe914190dda39568535e324a8cf268c03be09f6452440bf39f57f171c01e301ea0be1c3a584362141629076a3ae36f5177ef14825eb3551f3f2ed27abb37ea391c13508", 0xfd}, {&(0x7f0000000540)="1205a6350d8e00b8f3e6afe9dde3fab54143ec445278a0ea830f9eba200102d0ba212c3fe18fcd03f471532d7a68115535512147bd04c04b72399ccd2a56bdf60c47b02bbe5521d97c65735a42b16a49a81104790907415333b91e114af09131263d5019346a785dc4b7f9e55ee1c3a78ca1c8a37f7a04ec813f3a56f15775", 0x7f}], 0x4, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xbc}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1]}}}, @hopopts={{0x148, 0x29, 0x36, {0x0, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x80, 0x67, "ca120d7020235704a668cd7d27e2fdf65c3f1d4dd2e4121bd2b218a7487f0cb6ea7350d0bd98c2516b15bf5ec7243ba5fa92555f8aab5252db0c4b86362a80b405650ce135f640f29ab58121341538b94d6fe87b6067ab0956212f6ae51a87e52377673010ed16"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @ra={0x5, 0x2, 0xc2}, @generic={0x20, 0x94, "afb02921136364ad4399b80da57da1dcf0cc1126e17fea059b6f04b0fbdf04cc9897beed1e822a1a4462380d28f9ebcef1eab485d72d030adffc65b008aef75e8dd57e9fba4d8faae60ab19eec4409a008aab2e2f9adedaa0499c98a3f3f3f1d3b2b6e084f9eb6a6fed85e3afe3ae775e31782606bfbad066099da02fc06c6a76b0e898ae0402c49d8b3e5c0223c0fe8b1d68dd1"}, @jumbo={0xc2, 0x4, 0x7}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x2, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x20, 0x0, [@private1, @mcast1, @private0, @mcast1, @empty]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x70}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x89, 0xe, 0x2, 0x50, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @local, @mcast1, @private0, @remote]}}}], 0x328}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x5b}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8387}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000dc0)={'NETMAP\x00'}, &(0x7f0000000e00)=0x1e) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000e40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, r4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) r7 = socket$inet6(0xa, 0xa, 0x7fffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ec0)={'filter\x00', 0x47, "64d0dede0f13d257fae67c71976ab628694e51122567e354c882e533b4d50c794da1746bb99a83b5ebb9d6e95d1eca8d40937dbe8346903e60c8c33014438ff07fc67733e14780"}, &(0x7f0000000f40)=0x6b) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f80), 0x4443c2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001880)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x1000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, 0x1c, &(0x7f0000001000), 0x0, &(0x7f0000001040)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x3ff}, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x2, [0x9, 0x6, 0x401, 0x195, 0x8, 0x6, 0x8]}}, @pad1, @ra={0x5, 0x2, 0xfffa}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x6, 0x7, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x2000000}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x11, 0x8, 0x0, 0x1, 0x0, [@local, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x148}}, {{&(0x7f00000011c0)={0xa, 0x4e22, 0x1, @private0, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001200)="b9a06892e227848078f4eff64be91470a569fb", 0x13}, {&(0x7f0000001240)="dc172e03cf4a0cc63ded4412f8e4394c0da12d11ed6e18987d275fcae6087b04f0f2f31bd9baf0459da7e6f3766d289a66081a2b47f10190324a81d34d2c0346e9d32c5d0da26ed65b9bb13504d0daa288550bc46ffbd1391591a571f7d0828931a3ff86190ee2cf1c7758c9c0fb83fdefcfe91e8a62c6e4555a03ce47a15087eb1f15272fd09b6c7e385b8edaebbbf4c3afa1a99885bf39b161fe7636c5395504dd6d36bd321490c36a1fb75bf4a5fd495566f6c2e80edc426f17ad80dfa293dd836dec369d6c0c79e3630333e3be3afc93261136db130f6e", 0xd9}, {&(0x7f0000001340)="10c14a6bcad6625ce7057119bb76e484d47cec6de884320af4e5b65da876985e35681e", 0x23}, {&(0x7f0000001380)="fe08bade35106d88b70a39d9a836edae6f29ea4cbca431f415ad614af75eb3f0f6f693d2a1cc6d8aa1ac", 0x2a}, {&(0x7f00000013c0)="359f73a8dfd5afa34e6368342786f42cace0f7477bf40a2216d4c23b009ac460e48e6a8ab21503e241569ee55f39b50c4ee896474cc3a17130461d080fccf8fcacb016d1ea5ea3190a9e765cd65ffd86d28f8057b4ead46bd0ef11285a7e1b890de8dec622aa909c8c5bf59590fee11700b936", 0x73}, {&(0x7f0000001440)="5d5c64b40797bf0ac481b8b9512417ef9654e16930d404cfded44f879743c61336", 0x21}], 0x6, &(0x7f0000001500)=[@hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0x81, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hoplimit={{0x14}}, @hopopts_2292={{0x160, 0x29, 0x36, {0x87, 0x28, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x3, 0xad, "cec602440206dc2d40b6300812b081256ede1124f0f96f54e600bb22d793a71771f2611c089cba691bb02d59eb377240f33687792c36c9c19e3cfcbd6d5afd21ca1f2f9ab1dd44730119ef16a834bbdc3aef57a5e7ee1748fded9fa431aaa44fe8b6b2856ad2438897eddbaaac9ea5ec649e1a70e57586816273e1143bd4c51967f8280c2a9961d8839f56c5fa49cef39672f659798e908c4eb25cb8d83e25d2657058c2f9950052dcc31f70b5"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @calipso={0x7, 0x28, {0x2, 0x8, 0xfe, 0xaedd, [0x6, 0x5e63, 0x2, 0x1e92]}}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x1000, [0x6, 0x8]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x28}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x260}}, {{&(0x7f0000001780)={0xa, 0x4e21, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000017c0)="a75061be3e84651071f78ceb6be658a6b9c5fb144448", 0x16}], 0x1, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x3, 0x1) r9 = socket$inet6(0xa, 0x80000, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) 13:57:52 executing program 4: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x3f, 0x5, 0x7, 0x80, 0x4, 0x66}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0x40, 0x5, 0x8, 0x2, @lba=0x1f, 0x64}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0100, 0x0) ioctl$CDROMSTOP(r0, 0x5307) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) syz_io_uring_setup(0x38d5, &(0x7f0000000340)={0x0, 0x627c, 0x2, 0x3, 0x2e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x101) r5 = openat$cgroup_procs(r0, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r0, r3, r4, r1, r0, r0, r5, r1, r0, r6], 0xa, 0x0, 0x1}, 0x7) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x3ff) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000540)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000580)=@hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x100}]}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e24, 0x124c7730, @loopback, 0x7fffffff}}, {{0xa, 0x4e21, 0x10000, @mcast1, 0x4}}}, 0x108) 13:57:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x28000, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb4, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x52, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x1f, @device_a, 0x8001, "", 0x7, 0x3, @broadcast, 0x80}}, @mic={0x8c, 0x10, {0x676, "b61442fa8f6c", @short="8f280ba380db9d75"}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x3, 0x7, 0x0, {0x4, 0xb69, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x7}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x3, 0x1, 0xc5cd, 0x1}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa0, r9, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c8040}, 0x0) 13:57:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xbc4, 0x400040) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8050) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x540041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x100, 0xfffffffa, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x41) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40408c0}, 0x4011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x2, 0x0, 0x0, 0x9, 0xfff, 0x2}, 0x20) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}]}, 0x2c}}, 0x40090) 13:57:52 executing program 4: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x3f, 0x5, 0x7, 0x80, 0x4, 0x66}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0x40, 0x5, 0x8, 0x2, @lba=0x1f, 0x64}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0100, 0x0) ioctl$CDROMSTOP(r0, 0x5307) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) syz_io_uring_setup(0x38d5, &(0x7f0000000340)={0x0, 0x627c, 0x2, 0x3, 0x2e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x101) r5 = openat$cgroup_procs(r0, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r0, r3, r4, r1, r0, r0, r5, r1, r0, r6], 0xa, 0x0, 0x1}, 0x7) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x3ff) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000540)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000580)=@hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x100}]}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e24, 0x124c7730, @loopback, 0x7fffffff}}, {{0xa, 0x4e21, 0x10000, @mcast1, 0x4}}}, 0x108) 13:57:52 executing program 5: kexec_load(0x6, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="f667b1b3f1bc4177a51349046074ffa1a4054dc74e6ddbcd5c407e7ae086ff16f2da30fe130b4c73f5e6cc8106cc1c68a5197e04b12316cf41e4fffb6d3d1eb41d478a2c2fd72d", 0x47, 0x772, 0x40}, {&(0x7f0000000080)="6e2b5929bead3d63135b9e8c5c9fd8e4106119a009cf2a6895b8386daf7b5029cf026fdc7ed049a86b66a551ba577cb1f62c598ce8562f6f", 0x38, 0x0, 0x71}], 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}}, 0x8000) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x8, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000340)=[0xee00, r0, r1, 0xffffffffffffffff, 0x0]) kexec_load(0x9, 0x2, &(0x7f0000000500)=[{&(0x7f0000000380)="3882b494cc1e13d8d7c449d2bc2e7fd14576288db3fb49d7ba1fd74e1973fcfc732cd05df59a3739e3ddbbfcedff01e439bc789a65e8c3c72abd975b51054af98436f31fc752c7285539bb7706b078e66bceaff23b6bb2c06266e733ddce0ac722609fa1d12058b59a94cdd4ac362dcf961cf95085eea2c865dd5917dcbf280394c767b552a71567faade9912e643a26fc870e8b8fa57ec0350bf1155174305ff93cd42ee4c988e0972ab580", 0xac, 0xffffffffffffffac, 0x7}, {&(0x7f0000000440)="cf603add9597ed4e41afe4be7501fffcec0c53bfa0c39b695061615c5500607281b6935d1b5b9d2304d0613b41b724e5cb922b5c15f2ac25ae189ed20a5c2c03085b0d9782a8deacad9701e0ba8e72c25ae63fe2e8c472bc7ad001e8e4534402931d2160d25c53136d31c1f3d223eecb49e3aa98c182aba3d3c8dde6e12da09590adb92f76a7f882c1d80e658a67cc7884e6c92cd2a73a03b1d3", 0x9a, 0x2, 0x100}], 0x280000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x1) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x300, 0x7fff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9db558ee3dd9f22e4f09e05d220fa666b203fc13a0b0865"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d90b29ef987df2b99f407e4c58f4fd022469e4f4c504b109"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x50004}, 0x20000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c8e4}, 0x24048804) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000801) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000cc0)) 13:57:52 executing program 6: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x40, 0x2, [0x0, 0x4, 0x7f, 0x5, 0xb00b, 0x1f]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3f, [0x6]}}, @pad1]}, 0x58) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x90d5, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@local, @local, @local, 0x7, 0xe31d, 0x4, 0x100, 0x80000001, 0x4, r2}) r3 = accept(r1, &(0x7f0000000300)=@ethernet, &(0x7f0000000380)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x2, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x47, r2}) connect$802154_dgram(r3, &(0x7f0000000600)={0x24, @long={0x3, 0xffff}}, 0x14) r5 = accept4$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000006c0)=""/58, &(0x7f0000000700)=0x3a) accept4$inet6(r0, 0x0, &(0x7f0000000740), 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f00000007c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40941) 13:57:52 executing program 3: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xfffffff7}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x4000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6, 0x17, 0x18, "fcbbdc5da02bc68cde1e0c064328f93108cb5ec9bc23e2f54861e7edc5b2869e739cd3f6c53905f043dc96c4965e5e395b42edc8b0ddc04cbdf586b766f1b231", "66ac799530dc990859cbf22a916d1f6a3b2ecbcf3bfd470108c17b9ee20364eb6db8b9a37561f03359dae5a09ccb92798b240f83083cc73048a7fd0d0580bbb9", "4015a42b6a3d825f424f64df3ea1bcf7f4818debcf3c18e5ff40bcd6ca5f450f", [0x6, 0x9]}) r4 = epoll_create(0x8001) epoll_pwait(r4, &(0x7f00000003c0)=[{}, {}], 0x2, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4a8e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5296}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r6 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@alg, &(0x7f0000000640)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0x2, [{}, {}]}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d8, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0x3, 0x3, 0xc3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x67]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x80, 0x0, 0x4, 0x1, 0x2, 0xffc0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x2, 0x1b}, {0x6, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x2}, {}, {0x5, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x7f3, 0xb6, 0x8a, 0x7, 0x3ff, 0x8e]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x11}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xb, 0xc, 0x4, 0x18, 0x6, 0x60, 0x48, 0xb, 0x24, 0x3, 0x60, 0x2, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x18, 0x5, 0x6c, 0x5, 0x30, 0x12, 0x1, 0x4, 0x30, 0x6c, 0x6c]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf9}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x18}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e23, 0x54, 0x4e24, 0x9, 0xa, 0x20, 0x80, 0x2e, r8}, {0x10001, 0x100000001, 0x2b, 0x2, 0x3f, 0x3, 0x5, 0x5}, {0xfff, 0x211, 0x7f, 0x80}, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x4, 0x0, 0x80, 0x5, 0x0, 0x8c2}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000801) 13:58:03 executing program 4: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x3f, 0x5, 0x7, 0x80, 0x4, 0x66}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0x40, 0x5, 0x8, 0x2, @lba=0x1f, 0x64}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0100, 0x0) ioctl$CDROMSTOP(r0, 0x5307) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) syz_io_uring_setup(0x38d5, &(0x7f0000000340)={0x0, 0x627c, 0x2, 0x3, 0x2e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x101) r5 = openat$cgroup_procs(r0, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r0, r3, r4, r1, r0, r0, r5, r1, r0, r6], 0xa, 0x0, 0x1}, 0x7) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x3ff) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000540)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000580)=@hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x100}]}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e24, 0x124c7730, @loopback, 0x7fffffff}}, {{0xa, 0x4e21, 0x10000, @mcast1, 0x4}}}, 0x108) 13:58:03 executing program 3: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xfffffff7}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x4000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6, 0x17, 0x18, "fcbbdc5da02bc68cde1e0c064328f93108cb5ec9bc23e2f54861e7edc5b2869e739cd3f6c53905f043dc96c4965e5e395b42edc8b0ddc04cbdf586b766f1b231", "66ac799530dc990859cbf22a916d1f6a3b2ecbcf3bfd470108c17b9ee20364eb6db8b9a37561f03359dae5a09ccb92798b240f83083cc73048a7fd0d0580bbb9", "4015a42b6a3d825f424f64df3ea1bcf7f4818debcf3c18e5ff40bcd6ca5f450f", [0x6, 0x9]}) r4 = epoll_create(0x8001) epoll_pwait(r4, &(0x7f00000003c0)=[{}, {}], 0x2, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4a8e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5296}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r6 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@alg, &(0x7f0000000640)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0x2, [{}, {}]}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d8, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0x3, 0x3, 0xc3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x67]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x80, 0x0, 0x4, 0x1, 0x2, 0xffc0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x2, 0x1b}, {0x6, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x2}, {}, {0x5, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x7f3, 0xb6, 0x8a, 0x7, 0x3ff, 0x8e]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x11}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xb, 0xc, 0x4, 0x18, 0x6, 0x60, 0x48, 0xb, 0x24, 0x3, 0x60, 0x2, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x18, 0x5, 0x6c, 0x5, 0x30, 0x12, 0x1, 0x4, 0x30, 0x6c, 0x6c]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf9}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x18}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e23, 0x54, 0x4e24, 0x9, 0xa, 0x20, 0x80, 0x2e, r8}, {0x10001, 0x100000001, 0x2b, 0x2, 0x3f, 0x3, 0x5, 0x5}, {0xfff, 0x211, 0x7f, 0x80}, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x4, 0x0, 0x80, 0x5, 0x0, 0x8c2}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000801) 13:58:03 executing program 6: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x40, 0x2, [0x0, 0x4, 0x7f, 0x5, 0xb00b, 0x1f]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3f, [0x6]}}, @pad1]}, 0x58) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x90d5, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@local, @local, @local, 0x7, 0xe31d, 0x4, 0x100, 0x80000001, 0x4, r2}) r3 = accept(r1, &(0x7f0000000300)=@ethernet, &(0x7f0000000380)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x2, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x47, r2}) connect$802154_dgram(r3, &(0x7f0000000600)={0x24, @long={0x3, 0xffff}}, 0x14) r5 = accept4$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000006c0)=""/58, &(0x7f0000000700)=0x3a) accept4$inet6(r0, 0x0, &(0x7f0000000740), 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f00000007c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x8c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x7}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40941) 13:58:03 executing program 1: socketpair(0x2a, 0xa, 0xd38, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000080)=0x1c) r2 = accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x40, 0x400, 0x5a5b, 0x100, 0x5922, 0x42000000}) r3 = accept$inet6(r2, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$inet6(r3, &(0x7f0000000b00)={&(0x7f0000000200)={0xa, 0x4e22, 0x10001, @private0, 0x9437}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="5a4c1617054eabbd798345fedbfdda079ea1fbf8b00b4818f2f796d534e40adb7833c91fce67eca6023f5d092dff7cbe6601dd2ebfffce4f2eb5f895c7e6b51b83edb3898b45cf8de80aa27a046b9836ff0115c8657c4909f40d7c51d5cd62d2fd7dbd7145da1c352914574bd939944a707dbfbcc1f6dceece07a9f97a415f826343fd0ccc5019b54647b839e034a2723eb9e64c3f3d60fc33c37aab413682f2e67e7d0ae7404b3ab0a8db50414197281973d3627a59407c8ad702308a1840f0c567e7e1860c9b8d5ef8f7b3456d856d094c1f1095ab81fde83fe1422c633e8e1a637c713f696d0e8a", 0xe9}, {&(0x7f0000000340)="7437f0a44b5ec4181c75b3df126a443f767e9aab53cca195589dda9564c36e02957615d48e5301041fc98711de109d3ba1e31a25d4f58b01566e1605c6f17d9aa75d061b458303d8abb152ca7e267b53db8b71e562cd72ea4484a56a3e49931f98fbb022a93c67a8077745231b6ad1fa073a0f0c9471263daa2674cfa199c881446023efd329763149b7d2e7a2e0e619901cd254a8062324d97ff8d70b29410f9009bdd2866cf3d14c74fbf64791dc570c4e361f2c992af95aa542e79a2c1b7bc21937d33580a84d8f7d548f3a755bcf23580f9546e97316b112eaeb3cb66f9c83", 0xe1}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000540)="1205a6350d8e00b8f3e6afe9dde3fab54143ec445278a0ea830f9eba200102d0ba212c3fe18fcd03f471532d7a68115535512147bd04c04b72399ccd2a56bdf60c47b02bbe5521d97c65735a42b16a49a81104790907415333b91e114af09131263d5019346a785dc4b7f9e55ee1c3a78ca1c8a37f7a04ec813f3a56f15775", 0x7f}], 0x4, &(0x7f00000007c0)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0xbc}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x1, [0x0]}, @pad1, @pad1]}}}, @hopopts={{0x148, 0x29, 0x36, {0x0, 0x25, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x80, 0x67, "ca120d7020235704a668cd7d27e2fdf65c3f1d4dd2e4121bd2b218a7487f0cb6ea7350d0bd98c2516b15bf5ec7243ba5fa92555f8aab5252db0c4b86362a80b405650ce135f640f29ab58121341538b94d6fe87b6067ab0956212f6ae51a87e52377673010ed16"}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x80000000}, @pad1, @ra={0x5, 0x2, 0xc2}, @generic={0x20, 0x94, "afb02921136364ad4399b80da57da1dcf0cc1126e17fea059b6f04b0fbdf04cc9897beed1e822a1a4462380d28f9ebcef1eab485d72d030adffc65b008aef75e8dd57e9fba4d8faae60ab19eec4409a008aab2e2f9adedaa0499c98a3f3f3f1d3b2b6e084f9eb6a6fed85e3afe3ae775e31782606bfbad066099da02fc06c6a76b0e898ae0402c49d8b3e5c0223c0fe8b1d68dd1"}, @jumbo={0xc2, 0x4, 0x7}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5e, 0x8, 0x2, 0x9, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1]}}}, @rthdr={{0x68, 0x29, 0x39, {0x0, 0xa, 0x0, 0x20, 0x0, [@private1, @mcast1, @private0, @mcast1, @empty]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x70}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x89, 0xe, 0x2, 0x50, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @dev={0xfe, 0x80, '\x00', 0x32}, @local, @mcast1, @private0, @remote]}}}], 0x328}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000c40)={&(0x7f0000000b40), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x17}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7f, 0x5b}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8387}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000dc0)={'NETMAP\x00'}, &(0x7f0000000e00)=0x1e) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000e40)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, r4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan0\x00'}) r7 = socket$inet6(0xa, 0xa, 0x7fffffff) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000ec0)={'filter\x00', 0x47, "64d0dede0f13d257fae67c71976ab628694e51122567e354c882e533b4d50c794da1746bb99a83b5ebb9d6e95d1eca8d40937dbe8346903e60c8c33014438ff07fc67733e14780"}, &(0x7f0000000f40)=0x6b) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f80), 0x4443c2, 0x0) sendmmsg$inet6(r8, &(0x7f0000001880)=[{{&(0x7f0000000fc0)={0xa, 0x4e21, 0x1000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffffe}, 0x1c, &(0x7f0000001000), 0x0, &(0x7f0000001040)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@ra={0x5, 0x2, 0x3ff}, @calipso={0x7, 0x40, {0x1, 0xe, 0x9, 0x2, [0x9, 0x6, 0x401, 0x195, 0x8, 0x6, 0x8]}}, @pad1, @ra={0x5, 0x2, 0xfffa}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x6, 0x7, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0xff}, @jumbo={0xc2, 0x4, 0x2000000}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x11, 0x8, 0x0, 0x1, 0x0, [@local, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x148}}, {{&(0x7f00000011c0)={0xa, 0x4e22, 0x1, @private0, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000001200)="b9a06892e227848078f4eff64be91470a569fb", 0x13}, {&(0x7f0000001240)="dc172e03cf4a0cc63ded4412f8e4394c0da12d11ed6e18987d275fcae6087b04f0f2f31bd9baf0459da7e6f3766d289a66081a2b47f10190324a81d34d2c0346e9d32c5d0da26ed65b9bb13504d0daa288550bc46ffbd1391591a571f7d0828931a3ff86190ee2cf1c7758c9c0fb83fdefcfe91e8a62c6e4555a03ce47a15087eb1f15272fd09b6c7e385b8edaebbbf4c3afa1a99885bf39b161fe7636c5395504dd6d36bd321490c36a1fb75bf4a5fd495566f6c2e80edc426f17ad80dfa293dd836dec369d6c0c79e3630333e3be3afc93261136db130f6e", 0xd9}, {&(0x7f0000001340)="10c14a6bcad6625ce7057119bb76e484d47cec6de884320af4e5b65da876985e35681e", 0x23}, {&(0x7f0000001380)="fe08bade35106d88b70a39d9a836edae6f29ea4cbca431f415ad614af75eb3f0f6f693d2a1cc6d8aa1ac", 0x2a}, {&(0x7f00000013c0)="359f73a8dfd5afa34e6368342786f42cace0f7477bf40a2216d4c23b009ac460e48e6a8ab21503e241569ee55f39b50c4ee896474cc3a17130461d080fccf8fcacb016d1ea5ea3190a9e765cd65ffd86d28f8057b4ead46bd0ef11285a7e1b890de8dec622aa909c8c5bf59590fee11700b936", 0x73}, {&(0x7f0000001440)="5d5c64b40797bf0ac481b8b9512417ef9654e16930d404cfded44f879743c61336", 0x21}], 0x6, &(0x7f0000001500)=[@hoplimit={{0x14, 0x29, 0x34, 0x10001}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x2e, 0x2, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2b, 0x6, 0x2, 0x81, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x2c}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hoplimit={{0x14}}, @hopopts_2292={{0x160, 0x29, 0x36, {0x87, 0x28, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x3, 0xad, "cec602440206dc2d40b6300812b081256ede1124f0f96f54e600bb22d793a71771f2611c089cba691bb02d59eb377240f33687792c36c9c19e3cfcbd6d5afd21ca1f2f9ab1dd44730119ef16a834bbdc3aef57a5e7ee1748fded9fa431aaa44fe8b6b2856ad2438897eddbaaac9ea5ec649e1a70e57586816273e1143bd4c51967f8280c2a9961d8839f56c5fa49cef39672f659798e908c4eb25cb8d83e25d2657058c2f9950052dcc31f70b5"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x28}}, @calipso={0x7, 0x28, {0x2, 0x8, 0xfe, 0xaedd, [0x6, 0x5e63, 0x2, 0x1e92]}}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x1000, [0x6, 0x8]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x28}, @jumbo={0xc2, 0x4, 0x6}]}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x8}}], 0x260}}, {{&(0x7f0000001780)={0xa, 0x4e21, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000001800)=[{&(0x7f00000017c0)="a75061be3e84651071f78ceb6be658a6b9c5fb144448", 0x16}], 0x1, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r4}}}], 0x28}}], 0x3, 0x1) r9 = socket$inet6(0xa, 0x80000, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) 13:58:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xbc4, 0x400040) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8050) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x540041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x100, 0xfffffffa, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x41) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40408c0}, 0x4011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x2, 0x0, 0x0, 0x9, 0xfff, 0x2}, 0x20) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x11}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8001}]}, 0x2c}}, 0x40090) 13:58:03 executing program 7: getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000000000)=""/96, &(0x7f0000000080)=0x60) kcmp$KCMP_EPOLL_TFD(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = accept(r0, &(0x7f0000000100)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000180)=0x80) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x2, 0x4}, 0x1}}, @xdp={0x2c, 0x2, 0x0, 0x12}, @l2={0x1f, 0xff45, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)='wlan1\x00', 0x7, 0xeb, 0x2}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) r3 = socket$inet6(0xa, 0x2, 0x8) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000300)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x13, 0xffffffffffffffff, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008480) socketpair(0x21, 0x6, 0x20, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x78}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffff000}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5fb}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb55b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004845}, 0x40840) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0100, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r9 = socket$inet6(0xa, 0x6, 0x3) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r9, &(0x7f0000000900)={0xffffffffffffffff, r6, 0x8}) 13:58:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x4000080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x7c}}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000580), 0x28000, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb4, r6, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000084}, 0x4004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa8, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x52, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x4, 0x1f, @device_a, 0x8001, "", 0x7, 0x3, @broadcast, 0x80}}, @mic={0x8c, 0x10, {0x676, "b61442fa8f6c", @short="8f280ba380db9d75"}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x3, 0x7, 0x0, {0x4, 0xb69, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x7}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x3, 0x1, 0xc5cd, 0x1}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa0, r9, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x5}, 0x4) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r9, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40c8040}, 0x0) 13:58:03 executing program 5: kexec_load(0x6, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="f667b1b3f1bc4177a51349046074ffa1a4054dc74e6ddbcd5c407e7ae086ff16f2da30fe130b4c73f5e6cc8106cc1c68a5197e04b12316cf41e4fffb6d3d1eb41d478a2c2fd72d", 0x47, 0x772, 0x40}, {&(0x7f0000000080)="6e2b5929bead3d63135b9e8c5c9fd8e4106119a009cf2a6895b8386daf7b5029cf026fdc7ed049a86b66a551ba577cb1f62c598ce8562f6f", 0x38, 0x0, 0x71}], 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}}, 0x8000) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x8, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000340)=[0xee00, r0, r1, 0xffffffffffffffff, 0x0]) kexec_load(0x9, 0x2, &(0x7f0000000500)=[{&(0x7f0000000380)="3882b494cc1e13d8d7c449d2bc2e7fd14576288db3fb49d7ba1fd74e1973fcfc732cd05df59a3739e3ddbbfcedff01e439bc789a65e8c3c72abd975b51054af98436f31fc752c7285539bb7706b078e66bceaff23b6bb2c06266e733ddce0ac722609fa1d12058b59a94cdd4ac362dcf961cf95085eea2c865dd5917dcbf280394c767b552a71567faade9912e643a26fc870e8b8fa57ec0350bf1155174305ff93cd42ee4c988e0972ab580", 0xac, 0xffffffffffffffac, 0x7}, {&(0x7f0000000440)="cf603add9597ed4e41afe4be7501fffcec0c53bfa0c39b695061615c5500607281b6935d1b5b9d2304d0613b41b724e5cb922b5c15f2ac25ae189ed20a5c2c03085b0d9782a8deacad9701e0ba8e72c25ae63fe2e8c472bc7ad001e8e4534402931d2160d25c53136d31c1f3d223eecb49e3aa98c182aba3d3c8dde6e12da09590adb92f76a7f882c1d80e658a67cc7884e6c92cd2a73a03b1d3", 0x9a, 0x2, 0x100}], 0x280000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x1) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x300, 0x7fff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9db558ee3dd9f22e4f09e05d220fa666b203fc13a0b0865"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d90b29ef987df2b99f407e4c58f4fd022469e4f4c504b109"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x50004}, 0x20000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c8e4}, 0x24048804) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000801) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000cc0)) 13:58:03 executing program 6: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x40, 0x2, [0x0, 0x4, 0x7f, 0x5, 0xb00b, 0x1f]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3f, [0x6]}}, @pad1]}, 0x58) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x90d5, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@local, @local, @local, 0x7, 0xe31d, 0x4, 0x100, 0x80000001, 0x4, r2}) r3 = accept(r1, &(0x7f0000000300)=@ethernet, &(0x7f0000000380)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x2, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x47, r2}) connect$802154_dgram(r3, &(0x7f0000000600)={0x24, @long={0x3, 0xffff}}, 0x14) r5 = accept4$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000006c0)=""/58, &(0x7f0000000700)=0x3a) accept4$inet6(r0, 0x0, &(0x7f0000000740), 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f00000007c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r7) 13:58:03 executing program 6: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000040)=0x1c) r1 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000100)={0x3b, 0x9, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x40, 0x2, [0x0, 0x4, 0x7f, 0x5, 0xb00b, 0x1f]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x3f, [0x6]}}, @pad1]}, 0x58) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000180)={0x90d5, {{0xa, 0x4e23, 0x6, @loopback}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@local, @local, @local, 0x7, 0xe31d, 0x4, 0x100, 0x80000001, 0x4, r2}) r3 = accept(r1, &(0x7f0000000300)=@ethernet, &(0x7f0000000380)=0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r4, 0x2, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000005c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x47, r2}) connect$802154_dgram(r3, &(0x7f0000000600)={0x24, @long={0x3, 0xffff}}, 0x14) r5 = accept4$inet6(r0, &(0x7f0000000640)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f00000006c0)=""/58, &(0x7f0000000700)=0x3a) accept4$inet6(r0, 0x0, &(0x7f0000000740), 0x800) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000780), 0x301000, 0x0) ioctl$CDROM_NEXT_WRITABLE(r6, 0x5394, &(0x7f00000007c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) 13:58:04 executing program 4: ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000000)={0x3f, 0x5, 0x7, 0x80, 0x4, 0x66}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f00000000c0)={0x40, 0x5, 0x8, 0x2, @lba=0x1f, 0x64}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x2a0100, 0x0) ioctl$CDROMSTOP(r0, 0x5307) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private1}, &(0x7f0000000200)=0x14) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CDROM_LAST_WRITTEN(r1, 0x5395, &(0x7f0000000280)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000002c0)={'icmp6\x00'}, &(0x7f0000000300)=0x1e) syz_io_uring_setup(0x38d5, &(0x7f0000000340)={0x0, 0x627c, 0x2, 0x3, 0x2e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = epoll_create(0x101) r5 = openat$cgroup_procs(r0, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[r0, r3, r4, r1, r0, r0, r5, r1, r0, r6], 0xa, 0x0, 0x1}, 0x7) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x3ff) ioctl$CDROMSETSPINDOWN(r0, 0x531e, &(0x7f0000000540)) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000580)=@hopopts={0x3a, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x100}]}, 0x10) 13:58:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xbc4, 0x400040) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8050) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x540041, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r3, 0x100, 0xfffffffa, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x70}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x41) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40408c0}, 0x4011) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000900)={@private1, 0x2, 0x0, 0x0, 0x9, 0xfff, 0x2}, 0x20) ioctl$CDROMEJECT_SW(0xffffffffffffffff, 0x530f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) 13:58:04 executing program 3: r0 = epoll_create1(0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000100)={0xffffffffffffffff, r1, 0xfffffff7}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10010}, 0x4000) r3 = syz_open_dev$loop(&(0x7f0000000280), 0x1f, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x6, 0x17, 0x18, "fcbbdc5da02bc68cde1e0c064328f93108cb5ec9bc23e2f54861e7edc5b2869e739cd3f6c53905f043dc96c4965e5e395b42edc8b0ddc04cbdf586b766f1b231", "66ac799530dc990859cbf22a916d1f6a3b2ecbcf3bfd470108c17b9ee20364eb6db8b9a37561f03359dae5a09ccb92798b240f83083cc73048a7fd0d0580bbb9", "4015a42b6a3d825f424f64df3ea1bcf7f4818debcf3c18e5ff40bcd6ca5f450f", [0x6, 0x9]}) r4 = epoll_create(0x8001) epoll_pwait(r4, &(0x7f00000003c0)=[{}, {}], 0x2, 0x9, &(0x7f0000000400)={[0x1]}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4a8e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5296}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4804) r6 = accept(0xffffffffffffffff, &(0x7f00000005c0)=@alg, &(0x7f0000000640)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000680)={'nat\x00', 0x2, [{}, {}]}, 0x48) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1d8, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x5, 0x3, 0x3, 0xc3]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x67]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x80, 0x0, 0x4, 0x1, 0x2, 0xffc0]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x7}, {0x2, 0x8}, {0x4}, {0x2, 0x4}, {0x4}, {0x6, 0x9}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x6}, {0x3, 0x4}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x7}, {0x0, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x4}, {0x4, 0x9}]}]}, @NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x1}, {0x2, 0x1b}, {0x6, 0x4}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x3, 0x1}, {0x7, 0x8}, {0x4}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x5}, {0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x6}, {0x5, 0x4}, {0x6, 0x3}, {}, {0x1, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x8}, {0x2, 0x8}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0x7}, {0x6}, {0x0, 0x6}, {0x7, 0x7}, {0x7}, {0x2, 0x4}, {0x4, 0x5}, {0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0x9}, {0x7, 0x9}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x2}, {0x4, 0x7}, {0x6, 0x4}, {0x3, 0x8}, {0x2}, {}, {0x5, 0x4}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x5, 0x8}, {0x6}, {0x3, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x8, 0x7f3, 0xb6, 0x8a, 0x7, 0x3ff, 0x8e]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x7}, {0x6, 0x8}, {0x3, 0x7}, {0x4, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x5}, {0x0, 0x4}, {0x6, 0x9}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x4}, {0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x6, 0xa}, {0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x3}, {0x7, 0x11}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0xa}, {0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x2}, {0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0x1}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0xa}, {0x2, 0x2}, {0x3, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x9}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1b, 0xb, 0xc, 0x4, 0x18, 0x6, 0x60, 0x48, 0xb, 0x24, 0x3, 0x60, 0x2, 0x9, 0x2, 0x4]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x24, 0x18, 0x5, 0x6c, 0x5, 0x30, 0x12, 0x1, 0x4, 0x30, 0x6c, 0x6c]}]}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf9}, @NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x18}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ac0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e23, 0x54, 0x4e24, 0x9, 0xa, 0x20, 0x80, 0x2e, r8}, {0x10001, 0x100000001, 0x2b, 0x2, 0x3f, 0x3, 0x5, 0x5}, {0xfff, 0x211, 0x7f, 0x80}, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@mcast2, 0x3503, 0x4, 0x0, 0x80, 0x5, 0x0, 0x8c2}}, 0xe8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0xa}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000801) 13:58:04 executing program 5: kexec_load(0x6, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000000)="f667b1b3f1bc4177a51349046074ffa1a4054dc74e6ddbcd5c407e7ae086ff16f2da30fe130b4c73f5e6cc8106cc1c68a5197e04b12316cf41e4fffb6d3d1eb41d478a2c2fd72d", 0x47, 0x772, 0x40}, {&(0x7f0000000080)="6e2b5929bead3d63135b9e8c5c9fd8e4106119a009cf2a6895b8386daf7b5029cf026fdc7ed049a86b66a551ba577cb1f62c598ce8562f6f", 0x38, 0x0, 0x71}], 0x1) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x1c}}, 0x8000) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x8, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0x0]) getgroups(0x5, &(0x7f0000000340)=[0xee00, r0, r1, 0xffffffffffffffff, 0x0]) kexec_load(0x9, 0x2, &(0x7f0000000500)=[{&(0x7f0000000380)="3882b494cc1e13d8d7c449d2bc2e7fd14576288db3fb49d7ba1fd74e1973fcfc732cd05df59a3739e3ddbbfcedff01e439bc789a65e8c3c72abd975b51054af98436f31fc752c7285539bb7706b078e66bceaff23b6bb2c06266e733ddce0ac722609fa1d12058b59a94cdd4ac362dcf961cf95085eea2c865dd5917dcbf280394c767b552a71567faade9912e643a26fc870e8b8fa57ec0350bf1155174305ff93cd42ee4c988e0972ab580", 0xac, 0xffffffffffffffac, 0x7}, {&(0x7f0000000440)="cf603add9597ed4e41afe4be7501fffcec0c53bfa0c39b695061615c5500607281b6935d1b5b9d2304d0613b41b724e5cb922b5c15f2ac25ae189ed20a5c2c03085b0d9782a8deacad9701e0ba8e72c25ae63fe2e8c472bc7ad001e8e4534402931d2160d25c53136d31c1f3d223eecb49e3aa98c182aba3d3c8dde6e12da09590adb92f76a7f882c1d80e658a67cc7884e6c92cd2a73a03b1d3", 0x9a, 0x2, 0x100}], 0x280000) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x1) socketpair(0x0, 0x6, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, 0x0, 0x300, 0x7fff, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc7, 0x43}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e9db558ee3dd9f22e4f09e05d220fa666b203fc13a0b0865"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d90b29ef987df2b99f407e4c58f4fd022469e4f4c504b109"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xac}, 0x1, 0x0, 0x0, 0x50004}, 0x20000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x64, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4c8e4}, 0x24048804) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x84001}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xc}, @val={0x8}, @val={0xc, 0x99, {0x10000, 0x5b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24000801) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000c80)=0x2, 0x4) [ 179.640129] Bluetooth: hci5: command 0x0406 tx timeout [ 179.640136] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.641095] Bluetooth: hci3: command 0x0406 tx timeout [ 179.642040] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.642056] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.642066] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.642972] Bluetooth: hci4: command 0x0406 tx timeout [ 179.643650] Call Trace: [ 179.648091] [ 179.648423] __schedule+0x893/0x2470 [ 179.648993] ? io_schedule_timeout+0x150/0x150 [ 179.649624] ? do_raw_spin_lock+0x121/0x260 [ 179.650263] ? rwlock_bug.part.0+0x90/0x90 [ 179.650905] schedule+0xda/0x1b0 [ 179.651386] rescuer_thread+0x851/0xdb0 [ 179.651974] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.652683] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.653415] ? lockdep_hardirqs_on+0x79/0x100 [ 179.654077] ? worker_thread+0x1260/0x1260 [ 179.654665] kthread+0x2ed/0x3a0 [ 179.655159] ? kthread_complete_and_exit+0x40/0x40 [ 179.655858] ret_from_fork+0x22/0x30 [ 179.656395] [ 179.656713] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.657612] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.658337] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.659393] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.660545] Call Trace: [ 179.660945] [ 179.661271] __schedule+0x893/0x2470 [ 179.661864] ? io_schedule_timeout+0x150/0x150 [ 179.662514] ? do_raw_spin_lock+0x121/0x260 [ 179.663180] ? rwlock_bug.part.0+0x90/0x90 [ 179.663831] schedule+0xda/0x1b0 [ 179.664316] rescuer_thread+0x851/0xdb0 [ 179.664934] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.665636] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.666386] ? lockdep_hardirqs_on+0x79/0x100 [ 179.667071] ? worker_thread+0x1260/0x1260 [ 179.667684] kthread+0x2ed/0x3a0 [ 179.668216] ? kthread_complete_and_exit+0x40/0x40 [ 179.668938] ret_from_fork+0x22/0x30 [ 179.669477] [ 179.669839] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.670715] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.671458] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.672502] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.673653] Call Trace: [ 179.674037] [ 179.674365] __schedule+0x893/0x2470 [ 179.674951] ? io_schedule_timeout+0x150/0x150 [ 179.675585] ? do_raw_spin_lock+0x121/0x260 [ 179.676226] ? rwlock_bug.part.0+0x90/0x90 [ 179.676888] schedule+0xda/0x1b0 [ 179.677380] rescuer_thread+0x851/0xdb0 [ 179.677967] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.678668] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.679384] ? lockdep_hardirqs_on+0x79/0x100 [ 179.680043] ? worker_thread+0x1260/0x1260 [ 179.680634] kthread+0x2ed/0x3a0 [ 179.681151] ? kthread_complete_and_exit+0x40/0x40 [ 179.681863] ret_from_fork+0x22/0x30 [ 179.682402] [ 179.682746] INFO: task netns:6 blocked for more than 143 seconds. [ 179.683597] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.684352] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.685452] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.686633] Call Trace: [ 179.687042] [ 179.687374] __schedule+0x893/0x2470 [ 179.687957] ? io_schedule_timeout+0x150/0x150 [ 179.688607] ? do_raw_spin_lock+0x121/0x260 [ 179.689258] ? rwlock_bug.part.0+0x90/0x90 [ 179.689903] schedule+0xda/0x1b0 [ 179.690401] rescuer_thread+0x851/0xdb0 [ 179.691022] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.691728] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.692462] ? lockdep_hardirqs_on+0x79/0x100 [ 179.693129] ? worker_thread+0x1260/0x1260 [ 179.693734] kthread+0x2ed/0x3a0 [ 179.694253] ? kthread_complete_and_exit+0x40/0x40 [ 179.695000] ret_from_fork+0x22/0x30 [ 179.695554] [ 179.695928] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.696873] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.697625] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.698736] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 179.699950] Workqueue: 0x0 (kblockd) [ 179.700509] Call Trace: [ 179.700915] [ 179.701243] __schedule+0x893/0x2470 [ 179.701804] ? io_schedule_timeout+0x150/0x150 [ 179.702450] schedule+0xda/0x1b0 [ 179.703009] worker_thread+0x15f/0x1260 [ 179.703578] ? process_one_work+0x16a0/0x16a0 [ 179.704232] kthread+0x2ed/0x3a0 [ 179.704707] ? kthread_complete_and_exit+0x40/0x40 [ 179.705409] ret_from_fork+0x22/0x30 [ 179.705978] [ 179.706298] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.707240] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.707985] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.709074] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.710237] Call Trace: [ 179.710616] [ 179.711016] __schedule+0x893/0x2470 [ 179.711538] ? io_schedule_timeout+0x150/0x150 [ 179.712254] ? do_raw_spin_lock+0x121/0x260 [ 179.712922] ? rwlock_bug.part.0+0x90/0x90 [ 179.713528] schedule+0xda/0x1b0 [ 179.714038] rescuer_thread+0x851/0xdb0 [ 179.714594] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.715331] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.716057] ? lockdep_hardirqs_on+0x79/0x100 [ 179.716677] ? worker_thread+0x1260/0x1260 [ 179.717300] kthread+0x2ed/0x3a0 [ 179.717806] ? kthread_complete_and_exit+0x40/0x40 [ 179.718483] ret_from_fork+0x22/0x30 [ 179.719076] [ 179.719421] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.720454] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.721221] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.722300] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.723499] Call Trace: [ 179.723905] [ 179.724286] __schedule+0x893/0x2470 [ 179.724875] ? io_schedule_timeout+0x150/0x150 [ 179.725536] ? mark_held_locks+0x9e/0xe0 [ 179.726157] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.726944] schedule+0xda/0x1b0 [ 179.727444] rcu_tasks_one_gp+0x3db/0xc10 [ 179.728110] rcu_tasks_kthread+0x80/0xa0 [ 179.728692] ? rcu_tasks_postscan+0x10/0x10 [ 179.729343] kthread+0x2ed/0x3a0 [ 179.729869] ? kthread_complete_and_exit+0x40/0x40 [ 179.730603] ret_from_fork+0x22/0x30 [ 179.731229] [ 179.731599] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 179.732588] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.733366] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.734462] task:kworker/1:0 state:I stack:28952 pid:20 ppid:2 flags:0x00004000 [ 179.735663] Workqueue: 0x0 (rcu_gp) [ 179.736244] Call Trace: [ 179.736614] [ 179.736969] __schedule+0x893/0x2470 [ 179.737502] ? io_schedule_timeout+0x150/0x150 [ 179.738173] schedule+0xda/0x1b0 [ 179.738676] worker_thread+0x15f/0x1260 [ 179.739300] ? process_one_work+0x16a0/0x16a0 [ 179.739984] kthread+0x2ed/0x3a0 [ 179.740476] ? kthread_complete_and_exit+0x40/0x40 [ 179.741211] ret_from_fork+0x22/0x30 [ 179.741796] [ 179.793807] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.794837] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.795595] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.796735] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.797960] Workqueue: 0x0 (events_highpri) [ 179.798605] Call Trace: [ 179.799032] [ 179.799372] __schedule+0x893/0x2470 [ 179.799976] ? io_schedule_timeout+0x150/0x150 [ 179.800656] schedule+0xda/0x1b0 [ 179.801194] worker_thread+0x15f/0x1260 [ 179.801828] ? process_one_work+0x16a0/0x16a0 [ 179.802482] kthread+0x2ed/0x3a0 [ 179.803021] ? kthread_complete_and_exit+0x40/0x40 [ 179.803718] ret_from_fork+0x22/0x30 [ 179.804313] [ 179.804650] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.805612] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.806385] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.807493] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.808687] Call Trace: [ 179.809081] [ 179.809412] __schedule+0x893/0x2470 [ 179.810003] ? io_schedule_timeout+0x150/0x150 [ 179.810666] ? do_raw_spin_lock+0x121/0x260 [ 179.811328] ? rwlock_bug.part.0+0x90/0x90 [ 179.811976] schedule+0xda/0x1b0 [ 179.812481] rescuer_thread+0x851/0xdb0 [ 179.813085] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.813826] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.814537] ? lockdep_hardirqs_on+0x79/0x100 [ 179.815235] ? worker_thread+0x1260/0x1260 [ 179.815872] kthread+0x2ed/0x3a0 [ 179.816364] ? kthread_complete_and_exit+0x40/0x40 [ 179.817095] ret_from_fork+0x22/0x30 [ 179.817658] [ 179.818088] [ 179.818088] Showing all locks held in the system: [ 179.818984] 1 lock held by rcu_tasks_kthre/11: [ 179.819613] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.821018] 1 lock held by khungtaskd/25: [ 179.821588] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.822907] 1 lock held by systemd-journal/112: [ 179.823552] 1 lock held by in:imklog/198: [ 179.824153] 2 locks held by syz-executor/5937: [ 179.824817] [ 179.825065] ============================================= [ 179.825065] [ 187.832046] Bluetooth: hci6: command 0x0406 tx timeout VM DIAGNOSIS: 13:58:08 Registers: info registers vcpu 0 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d2b3194860 CR3=000000002719e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4135346000000000 YMM03=0000000000000000 0000000000000000 b9bb80050dfda748 30c73c08830f248b YMM04=0000000000000000 0000000000000000 7319b96a69eb021c 494f93678af4b0b9 YMM05=0000000000000000 0000000000000000 2bcd700bb1c80b3c 6f154ed3a6c62d9b YMM06=0000000000000000 0000000000000000 bfd6f00b5cfecb3c 1e30e08bbe3d9e67 YMM07=0000000000000000 0000000000000000 5408a496f3239e67 117f60476443ce1f YMM08=0000000000000000 0000000000000000 5408a4965b0fe9f8 f3239e67f9b5d3f2 YMM09=0000000000000000 0000000000000000 5602db4677390bb2 16b445d5e5ca8d65 YMM10=0000000000000000 0000000000000000 c96316bbefee2f32 368fca2d04f0e6cf YMM11=0000000000000000 0000000000000000 ab843978986040c2 15feddf9c9af567d YMM12=0000000000000000 0000000000000000 1f916dff8a643625 47282af2315be3b5 YMM13=0000000000000000 0000000000000000 000000c000206120 000000c005845d40 YMM14=0000000000000000 0000000000000000 000000c00089fce0 000000c0002064e0 YMM15=0000000000000000 0000000000000000 000000c0007d6480 000000c000312240 info registers vcpu 1 RAX=ffffed1003102ed3 RBX=1ffff11003102ed3 RCX=ffffffff8129b8df RDX=dffffc0000000000 RSI=ffff888015ec3fc0 RDI=ffff888015ec3580 RBP=ffff888015ec3fc0 RSP=ffff888018817660 R8 =0000000000000000 R9 =ffffffff86cd380f R10=fffffbfff0d9a701 R11=0000000000000001 R12=0000000000000008 R13=ffff888015ec3fc0 R14=ffff888015ec3ef8 R15=dffffc0000000000 RIP=ffffffff81297e16 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fec3baa6900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fec3aeef290 CR3=000000000ed1c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 494e4f544f4e4f4d 5f454352554f535f YMM01=0000000000000000 0000000000000000 4d49545f43494e4f 544f4e4f4d5f4543 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 97c9fe5f80fad8fc 0000000000133ca8 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 9bcb1d2db52789ad 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000