Warning: Permanently added '[localhost]:52780' (ECDSA) to the list of known hosts. 2022/10/03 04:25:24 fuzzer started 2022/10/03 04:25:24 dialing manager at localhost:35095 syzkaller login: [ 36.703829] cgroup: Unknown subsys name 'net' [ 36.814670] cgroup: Unknown subsys name 'rlimit' 2022/10/03 04:25:38 syscalls: 211 2022/10/03 04:25:38 code coverage: enabled 2022/10/03 04:25:38 comparison tracing: enabled 2022/10/03 04:25:38 extra coverage: enabled 2022/10/03 04:25:38 setuid sandbox: enabled 2022/10/03 04:25:38 namespace sandbox: enabled 2022/10/03 04:25:38 Android sandbox: enabled 2022/10/03 04:25:38 fault injection: enabled 2022/10/03 04:25:38 leak checking: enabled 2022/10/03 04:25:38 net packet injection: enabled 2022/10/03 04:25:38 net device setup: enabled 2022/10/03 04:25:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 04:25:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 04:25:38 USB emulation: enabled 2022/10/03 04:25:38 hci packet injection: enabled 2022/10/03 04:25:38 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 04:25:38 802.15.4 emulation: enabled 2022/10/03 04:25:38 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 04:25:39 starting 8 fuzzer processes 04:25:39 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r9, {0xffffffcc}}, './file0\x00'}) write$cgroup_type(r6, &(0x7f0000000940), 0x9) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xc}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1f, 0x0, 0x6, 0x8000, 0x0, 0x7, 0xffff, 0xaa]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 04:25:39 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r9, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:25:39 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, r11, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1a1e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x925}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x40}}, 0x20040004) 04:25:39 executing program 3: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/73) r0 = msgget(0x1, 0x400) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/144) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000140)=""/4096) keyctl$get_security(0x11, 0x0, &(0x7f0000001140)=""/43, 0x2b) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) msgrcv(r0, &(0x7f00000011c0)={0x0, ""/33}, 0x29, 0x0, 0x2000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001200)=""/249) r1 = msgget(0x3, 0x20) msgrcv(r1, &(0x7f0000001300)={0x0, ""/188}, 0xc4, 0x3, 0x2800) r2 = msgget(0x3, 0x308) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000001400)=""/142) r3 = msgget(0x0, 0x180) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001500)=""/52) msgrcv(r3, &(0x7f0000001540)={0x0, ""/4096}, 0x1008, 0x3, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000025c0)={0x2, 0x1, 0x8}) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000002600)={0x3, 0x1, 0xfffffff8, 0x7, 0x5}) keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffffc) [ 51.177944] audit: type=1400 audit(1664771139.427:6): avc: denied { execmem } for pid=281 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:25:39 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x2805b83aed062664, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000300)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2b5a92e40"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "33d2d5cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0457d911e8e0e4770575247408"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4004881) socketpair(0x5610f136a730056c, 0x3, 0x8000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x11}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa10800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44400}, 0x4001) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x60080440}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x54c742ecb4456523}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x201204}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x15}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x24000084) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000c40)={0x2, 0x3, 0x7, 0x9, 0x1, 0x101}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) 04:25:39 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) r8 = request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc3}, &(0x7f0000000dc0)={0x0, "f123864e464204f54a2b1f8eeeb7bf1dbb357d542d44bc884fcbc80eb0eb958d7348f5f41e1383caef7011ab94664f27d652f806f2857b1aeb040d5404759fb2", 0x35}, 0x48, r8) keyctl$dh_compute(0x17, &(0x7f0000000e40)={r5, r3, r4}, &(0x7f0000000e80)=""/20, 0x14, &(0x7f0000000f80)={&(0x7f0000000ec0)={'blake2s-224-generic\x00'}, &(0x7f0000000f00)="c6d7b84ee8810cdfdd7b4b3dfc54ca79a52764efbc4e1224b447523ede433a023ad544176a7923e7028fe4a634520e3bdd2945ff2e843b4251981b46e493e79bcb844d2c09bac97fa17311c8990610b3d7752939e494d312b3d54f8e8166ae70d437a16b7f7b52ac", 0x68}) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c081) 04:25:39 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r12, &(0x7f00000009c0)='ns/time_for_children\x00') 04:25:39 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c59feef7de4bd1a8075a61e7b267d7cac65fd4cb4626e16d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6d6e8ea94624448467c0f5f8f79ef91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20044041) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000840)) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x754) [ 52.408379] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.411613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.418633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.421240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.430560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.433580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.458166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.460634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.463921] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.465852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.467190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.468855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.470694] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.472963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 52.474570] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 52.476910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 52.480042] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 52.482163] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 52.482793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.483563] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 52.484881] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.489655] Bluetooth: hci5: HCI_REQ-0x0c1a [ 52.491126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.492126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.493256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.495369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.499951] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.502160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.506970] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.517299] Bluetooth: hci0: HCI_REQ-0x0c1a [ 52.518294] Bluetooth: hci2: HCI_REQ-0x0c1a [ 52.518902] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.519765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.520049] Bluetooth: hci3: HCI_REQ-0x0c1a [ 52.526978] Bluetooth: hci1: HCI_REQ-0x0c1a [ 52.576338] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.579671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.581110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.583905] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 52.585974] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.588253] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.589716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.593644] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 52.594635] Bluetooth: hci4: HCI_REQ-0x0c1a [ 52.602707] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 52.609599] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 52.613712] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 52.615718] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 52.622618] Bluetooth: hci7: HCI_REQ-0x0c1a [ 54.547089] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 54.547158] Bluetooth: hci1: command 0x0409 tx timeout [ 54.548551] Bluetooth: hci2: command 0x0409 tx timeout [ 54.548724] Bluetooth: hci0: command 0x0409 tx timeout [ 54.549303] Bluetooth: hci3: command 0x0409 tx timeout [ 54.549963] Bluetooth: hci5: command 0x0409 tx timeout [ 54.610513] Bluetooth: hci4: command 0x0409 tx timeout [ 54.675501] Bluetooth: hci7: command 0x0409 tx timeout [ 56.594498] Bluetooth: hci5: command 0x041b tx timeout [ 56.594933] Bluetooth: hci3: command 0x041b tx timeout [ 56.594971] Bluetooth: hci0: command 0x041b tx timeout [ 56.595810] Bluetooth: hci1: command 0x041b tx timeout [ 56.596137] Bluetooth: hci2: command 0x041b tx timeout [ 56.658472] Bluetooth: hci4: command 0x041b tx timeout [ 56.722559] Bluetooth: hci7: command 0x041b tx timeout [ 57.476630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.478676] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.480298] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.497198] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.499099] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 57.500602] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.505866] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.642482] Bluetooth: hci2: command 0x040f tx timeout [ 58.642632] Bluetooth: hci1: command 0x040f tx timeout [ 58.642953] Bluetooth: hci0: command 0x040f tx timeout [ 58.643469] Bluetooth: hci3: command 0x040f tx timeout [ 58.643879] Bluetooth: hci5: command 0x040f tx timeout [ 58.706484] Bluetooth: hci4: command 0x040f tx timeout [ 58.770466] Bluetooth: hci7: command 0x040f tx timeout [ 59.538530] Bluetooth: hci6: command 0x0409 tx timeout [ 60.690561] Bluetooth: hci3: command 0x0419 tx timeout [ 60.690604] Bluetooth: hci5: command 0x0419 tx timeout [ 60.691032] Bluetooth: hci0: command 0x0419 tx timeout [ 60.691510] Bluetooth: hci1: command 0x0419 tx timeout [ 60.691877] Bluetooth: hci2: command 0x0419 tx timeout [ 60.754490] Bluetooth: hci4: command 0x0419 tx timeout [ 60.818493] Bluetooth: hci7: command 0x0419 tx timeout [ 61.586539] Bluetooth: hci6: command 0x041b tx timeout [ 63.634495] Bluetooth: hci6: command 0x040f tx timeout [ 65.682524] Bluetooth: hci6: command 0x0419 tx timeout 04:26:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r9, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r9, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r9, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000b40)={{0x1, 0x1, 0x18, r4}, './file1\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r9, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r10, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x75}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r9, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r8) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r8, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) accept$inet(r5, &(0x7f0000000980)={0x2, 0x0, @multicast1}, &(0x7f00000009c0)=0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x9c, r8, 0x222, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2bb7815946d3"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x46a}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2cd0c88fca86"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_IE={0x4c, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x24, 0x38, 0x4}}, @link_id={0x65, 0x12, {@random="fcfebe595794", @broadcast, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x5, 0xae}}, @rann={0x7e, 0x15, {{0x1, 0x68}, 0x9, 0x4, @device_a, 0x2, 0xe0, 0x10001}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @channel_switch={0x25, 0x3, {0x0, 0xb7, 0x2}}, @channel_switch={0x25, 0x3, {0x1, 0x80, 0x7f}}, @supported_rates={0x1, 0x2, [{0x6c}, {0x1b}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x612dae9869052306}, 0x4001) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:26:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) [ 113.642497] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 113.644979] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 113.649834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 113.651816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 113.653140] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 113.653954] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 113.657343] Bluetooth: hci7: HCI_REQ-0x0c1a [ 113.661057] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.676371] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.677527] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.680310] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.684262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.685006] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.698014] Bluetooth: hci3: HCI_REQ-0x0c1a [ 115.666541] Bluetooth: hci7: command 0x0409 tx timeout [ 115.730520] Bluetooth: hci3: command 0x0409 tx timeout [ 117.714527] Bluetooth: hci7: command 0x041b tx timeout [ 117.779510] Bluetooth: hci3: command 0x041b tx timeout [ 119.763463] Bluetooth: hci7: command 0x040f tx timeout [ 119.826611] Bluetooth: hci3: command 0x040f tx timeout [ 121.810573] Bluetooth: hci7: command 0x0419 tx timeout [ 121.874590] Bluetooth: hci3: command 0x0419 tx timeout 04:27:11 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c59feef7de4bd1a8075a61e7b267d7cac65fd4cb4626e16d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6d6e8ea94624448467c0f5f8f79ef91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20044041) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000840)) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x754) 04:27:11 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r9, {0xffffffcc}}, './file0\x00'}) write$cgroup_type(r6, &(0x7f0000000940), 0x9) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xc}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1f, 0x0, 0x6, 0x8000, 0x0, 0x7, 0xffff, 0xaa]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 04:27:11 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r6 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) r7 = syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, r5, {r7}}, './file0/file0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:27:11 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x2805b83aed062664, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000300)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2b5a92e40"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "33d2d5cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0457d911e8e0e4770575247408"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4004881) socketpair(0x5610f136a730056c, 0x3, 0x8000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x11}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa10800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44400}, 0x4001) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x60080440}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x54c742ecb4456523}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x201204}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x15}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x24000084) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000c40)={0x2, 0x3, 0x7, 0x9, 0x1, 0x101}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) 04:27:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r12, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:11 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, r11, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1a1e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x925}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x40}}, 0x20040004) 04:27:11 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) r8 = request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc3}, &(0x7f0000000dc0)={0x0, "f123864e464204f54a2b1f8eeeb7bf1dbb357d542d44bc884fcbc80eb0eb958d7348f5f41e1383caef7011ab94664f27d652f806f2857b1aeb040d5404759fb2", 0x35}, 0x48, r8) keyctl$dh_compute(0x17, &(0x7f0000000e40)={r5, r3, r4}, &(0x7f0000000e80)=""/20, 0x14, &(0x7f0000000f80)={&(0x7f0000000ec0)={'blake2s-224-generic\x00'}, &(0x7f0000000f00)="c6d7b84ee8810cdfdd7b4b3dfc54ca79a52764efbc4e1224b447523ede433a023ad544176a7923e7028fe4a634520e3bdd2945ff2e843b4251981b46e493e79bcb844d2c09bac97fa17311c8990610b3d7752939e494d312b3d54f8e8166ae70d437a16b7f7b52ac", 0x68}) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c081) 04:27:11 executing program 3: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/73) r0 = msgget(0x1, 0x400) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/144) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000140)=""/4096) keyctl$get_security(0x11, 0x0, &(0x7f0000001140)=""/43, 0x2b) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) msgrcv(r0, &(0x7f00000011c0)={0x0, ""/33}, 0x29, 0x0, 0x2000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001200)=""/249) r1 = msgget(0x3, 0x20) msgrcv(r1, &(0x7f0000001300)={0x0, ""/188}, 0xc4, 0x3, 0x2800) r2 = msgget(0x3, 0x308) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000001400)=""/142) r3 = msgget(0x0, 0x180) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001500)=""/52) msgrcv(r3, &(0x7f0000001540)={0x0, ""/4096}, 0x1008, 0x3, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000025c0)={0x2, 0x1, 0x8}) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000002600)={0x3, 0x1, 0xfffffff8, 0x7, 0x5}) keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffffc) 04:27:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r12, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:24 executing program 3: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/73) r0 = msgget(0x1, 0x400) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/144) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000140)=""/4096) keyctl$get_security(0x11, 0x0, &(0x7f0000001140)=""/43, 0x2b) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) msgrcv(r0, &(0x7f00000011c0)={0x0, ""/33}, 0x29, 0x0, 0x2000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001200)=""/249) r1 = msgget(0x3, 0x20) msgrcv(r1, &(0x7f0000001300)={0x0, ""/188}, 0xc4, 0x3, 0x2800) r2 = msgget(0x3, 0x308) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000001400)=""/142) r3 = msgget(0x0, 0x180) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001500)=""/52) msgrcv(r3, &(0x7f0000001540)={0x0, ""/4096}, 0x1008, 0x3, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000025c0)={0x2, 0x1, 0x8}) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000002600)={0x3, 0x1, 0xfffffff8, 0x7, 0x5}) keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffffc) 04:27:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r9, {0xffffffcc}}, './file0\x00'}) write$cgroup_type(r6, &(0x7f0000000940), 0x9) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xc}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1f, 0x0, 0x6, 0x8000, 0x0, 0x7, 0xffff, 0xaa]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 04:27:24 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c59feef7de4bd1a8075a61e7b267d7cac65fd4cb4626e16d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6d6e8ea94624448467c0f5f8f79ef91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20044041) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000840)) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x754) 04:27:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r10, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r12, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:24 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) r8 = request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc3}, &(0x7f0000000dc0)={0x0, "f123864e464204f54a2b1f8eeeb7bf1dbb357d542d44bc884fcbc80eb0eb958d7348f5f41e1383caef7011ab94664f27d652f806f2857b1aeb040d5404759fb2", 0x35}, 0x48, r8) keyctl$dh_compute(0x17, &(0x7f0000000e40)={r5, r3, r4}, &(0x7f0000000e80)=""/20, 0x14, &(0x7f0000000f80)={&(0x7f0000000ec0)={'blake2s-224-generic\x00'}, &(0x7f0000000f00)="c6d7b84ee8810cdfdd7b4b3dfc54ca79a52764efbc4e1224b447523ede433a023ad544176a7923e7028fe4a634520e3bdd2945ff2e843b4251981b46e493e79bcb844d2c09bac97fa17311c8990610b3d7752939e494d312b3d54f8e8166ae70d437a16b7f7b52ac", 0x68}) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c081) 04:27:24 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, r11, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1a1e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x925}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x40}}, 0x20040004) 04:27:24 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x2805b83aed062664, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000300)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2b5a92e40"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "33d2d5cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0457d911e8e0e4770575247408"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4004881) socketpair(0x5610f136a730056c, 0x3, 0x8000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x11}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa10800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44400}, 0x4001) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x60080440}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x54c742ecb4456523}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x201204}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x15}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x24000084) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000c40)={0x2, 0x3, 0x7, 0x9, 0x1, 0x101}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) 04:27:24 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) syz_open_dev$hiddev(&(0x7f0000000740), 0x1000, 0x200000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:27:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r9, {0xffffffcc}}, './file0\x00'}) write$cgroup_type(r6, &(0x7f0000000940), 0x9) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xc}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1f, 0x0, 0x6, 0x8000, 0x0, 0x7, 0xffff, 0xaa]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 04:27:25 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x40, r11, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x45}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1a1e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x925}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}]}, 0x40}}, 0x20040004) 04:27:25 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:25 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c59feef7de4bd1a8075a61e7b267d7cac65fd4cb4626e16d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6d6e8ea94624448467c0f5f8f79ef91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20044041) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000840)) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x754) 04:27:25 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) r8 = request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc3}, &(0x7f0000000dc0)={0x0, "f123864e464204f54a2b1f8eeeb7bf1dbb357d542d44bc884fcbc80eb0eb958d7348f5f41e1383caef7011ab94664f27d652f806f2857b1aeb040d5404759fb2", 0x35}, 0x48, r8) keyctl$dh_compute(0x17, &(0x7f0000000e40)={r5, r3, r4}, &(0x7f0000000e80)=""/20, 0x14, &(0x7f0000000f80)={&(0x7f0000000ec0)={'blake2s-224-generic\x00'}, &(0x7f0000000f00)="c6d7b84ee8810cdfdd7b4b3dfc54ca79a52764efbc4e1224b447523ede433a023ad544176a7923e7028fe4a634520e3bdd2945ff2e843b4251981b46e493e79bcb844d2c09bac97fa17311c8990610b3d7752939e494d312b3d54f8e8166ae70d437a16b7f7b52ac", 0x68}) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c000}, 0x2000c081) 04:27:25 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c59feef7de4bd1a8075a61e7b267d7cac65fd4cb4626e16d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6d6e8ea94624448467c0f5f8f79ef91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20044041) ioctl$HIDIOCGFLAG(r6, 0x8004480e, &(0x7f0000000840)) 04:27:25 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) r8 = request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc3}, &(0x7f0000000dc0)={0x0, "f123864e464204f54a2b1f8eeeb7bf1dbb357d542d44bc884fcbc80eb0eb958d7348f5f41e1383caef7011ab94664f27d652f806f2857b1aeb040d5404759fb2", 0x35}, 0x48, r8) keyctl$dh_compute(0x17, &(0x7f0000000e40)={r5, r3, r4}, &(0x7f0000000e80)=""/20, 0x14, &(0x7f0000000f80)={&(0x7f0000000ec0)={'blake2s-224-generic\x00'}, &(0x7f0000000f00)="c6d7b84ee8810cdfdd7b4b3dfc54ca79a52764efbc4e1224b447523ede433a023ad544176a7923e7028fe4a634520e3bdd2945ff2e843b4251981b46e493e79bcb844d2c09bac97fa17311c8990610b3d7752939e494d312b3d54f8e8166ae70d437a16b7f7b52ac", 0x68}) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) 04:27:37 executing program 3: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/73) r0 = msgget(0x1, 0x400) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/144) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000140)=""/4096) keyctl$get_security(0x11, 0x0, &(0x7f0000001140)=""/43, 0x2b) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) msgrcv(r0, &(0x7f00000011c0)={0x0, ""/33}, 0x29, 0x0, 0x2000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001200)=""/249) r1 = msgget(0x3, 0x20) msgrcv(r1, &(0x7f0000001300)={0x0, ""/188}, 0xc4, 0x3, 0x2800) r2 = msgget(0x3, 0x308) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000001400)=""/142) r3 = msgget(0x0, 0x180) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001500)=""/52) msgrcv(r3, &(0x7f0000001540)={0x0, ""/4096}, 0x1008, 0x3, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000025c0)={0x2, 0x1, 0x8}) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000002600)={0x3, 0x1, 0xfffffff8, 0x7, 0x5}) keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffffc) 04:27:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = syz_open_dev$vcsa(&(0x7f0000000700), 0x100000001, 0x193000) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:27:37 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) r8 = request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @desc3}, &(0x7f0000000dc0)={0x0, "f123864e464204f54a2b1f8eeeb7bf1dbb357d542d44bc884fcbc80eb0eb958d7348f5f41e1383caef7011ab94664f27d652f806f2857b1aeb040d5404759fb2", 0x35}, 0x48, r8) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) 04:27:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r9, {0xffffffcc}}, './file0\x00'}) write$cgroup_type(r6, &(0x7f0000000940), 0x9) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xc}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x1f, 0x0, 0x6, 0x8000, 0x0, 0x7, 0xffff, 0xaa]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 04:27:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r9) 04:27:37 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x2805b83aed062664, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000300)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2b5a92e40"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "33d2d5cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0457d911e8e0e4770575247408"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4004881) socketpair(0x5610f136a730056c, 0x3, 0x8000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x11}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa10800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44400}, 0x4001) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x60080440}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x54c742ecb4456523}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x201204}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x15}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x24000084) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000c40)={0x2, 0x3, 0x7, 0x9, 0x1, 0x101}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3, @out_args}, './file0\x00'}) 04:27:37 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x7c, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x6f}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c59feef7de4bd1a8075a61e7b267d7cac65fd4cb4626e16d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b6d6e8ea94624448467c0f5f8f79ef91"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000001}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20044041) 04:27:37 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) request_key(&(0x7f0000000c80)='.request_key_auth\x00', &(0x7f0000000cc0)={'syz', 0x3}, &(0x7f0000000d00)='e8dab99234bb312e', r6) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) 04:27:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000001680)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) 04:27:37 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) 04:27:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r8, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:27:37 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r9, {0xffffffcc}}, './file0\x00'}) write$cgroup_type(r6, &(0x7f0000000940), 0x9) [ 175.570717] Bluetooth: hci0: command 0x0406 tx timeout [ 175.570764] Bluetooth: hci2: command 0x0406 tx timeout [ 175.571692] Bluetooth: hci5: command 0x0406 tx timeout [ 175.572476] Bluetooth: hci1: command 0x0406 tx timeout [ 175.572508] Bluetooth: hci4: command 0x0406 tx timeout [ 179.666665] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.667706] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.668468] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.669506] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.670662] Call Trace: [ 179.671214] [ 179.671571] __schedule+0x893/0x2470 [ 179.672662] ? io_schedule_timeout+0x150/0x150 [ 179.673718] ? do_raw_spin_lock+0x121/0x260 [ 179.674325] ? rwlock_bug.part.0+0x90/0x90 [ 179.674948] schedule+0xda/0x1b0 [ 179.675445] rescuer_thread+0x851/0xdb0 [ 179.676004] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.676725] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.677443] ? lockdep_hardirqs_on+0x79/0x100 [ 179.678102] ? worker_thread+0x1260/0x1260 [ 179.678733] kthread+0x2ed/0x3a0 [ 179.679222] ? kthread_complete_and_exit+0x40/0x40 [ 179.679935] ret_from_fork+0x22/0x30 [ 179.680516] [ 179.680851] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.681761] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.682488] Bluetooth: hci6: command 0x0406 tx timeout [ 179.683589] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.685075] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.686664] Call Trace: [ 179.687173] [ 179.687655] __schedule+0x893/0x2470 [ 179.688355] ? io_schedule_timeout+0x150/0x150 [ 179.689116] ? do_raw_spin_lock+0x121/0x260 [ 179.689841] ? rwlock_bug.part.0+0x90/0x90 [ 179.690575] schedule+0xda/0x1b0 [ 179.691131] rescuer_thread+0x851/0xdb0 [ 179.691808] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.692622] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.693330] ? lockdep_hardirqs_on+0x79/0x100 [ 179.694013] ? worker_thread+0x1260/0x1260 [ 179.694654] kthread+0x2ed/0x3a0 [ 179.695146] ? kthread_complete_and_exit+0x40/0x40 [ 179.695846] ret_from_fork+0x22/0x30 [ 179.696384] [ 179.696739] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.697642] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.698360] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.699388] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.700531] Call Trace: [ 179.700884] [ 179.701200] __schedule+0x893/0x2470 [ 179.701754] ? io_schedule_timeout+0x150/0x150 [ 179.702387] ? do_raw_spin_lock+0x121/0x260 [ 179.703015] ? rwlock_bug.part.0+0x90/0x90 [ 179.703655] schedule+0xda/0x1b0 [ 179.704148] rescuer_thread+0x851/0xdb0 [ 179.704754] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.705491] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.706225] ? lockdep_hardirqs_on+0x79/0x100 [ 179.706904] ? worker_thread+0x1260/0x1260 [ 179.707538] kthread+0x2ed/0x3a0 [ 179.708030] ? kthread_complete_and_exit+0x40/0x40 [ 179.708762] ret_from_fork+0x22/0x30 [ 179.709328] [ 179.709704] INFO: task netns:6 blocked for more than 143 seconds. [ 179.710586] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.711325] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.712406] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.713613] Call Trace: [ 179.713982] [ 179.714336] __schedule+0x893/0x2470 [ 179.714926] ? io_schedule_timeout+0x150/0x150 [ 179.715603] ? do_raw_spin_lock+0x121/0x260 [ 179.716226] ? rwlock_bug.part.0+0x90/0x90 [ 179.716867] schedule+0xda/0x1b0 [ 179.717358] rescuer_thread+0x851/0xdb0 [ 179.717956] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.718707] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.719454] ? lockdep_hardirqs_on+0x79/0x100 [ 179.720095] ? worker_thread+0x1260/0x1260 [ 179.720734] kthread+0x2ed/0x3a0 [ 179.721222] ? kthread_complete_and_exit+0x40/0x40 [ 179.721960] ret_from_fork+0x22/0x30 [ 179.722568] [ 179.722905] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.723857] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.724616] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.725701] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 179.726893] Workqueue: 0x0 (events_highpri) [ 179.727557] Call Trace: [ 179.727920] [ 179.728253] __schedule+0x893/0x2470 [ 179.728837] ? io_schedule_timeout+0x150/0x150 [ 179.729561] schedule+0xda/0x1b0 [ 179.730070] worker_thread+0x15f/0x1260 [ 179.730715] ? process_one_work+0x16a0/0x16a0 [ 179.731362] kthread+0x2ed/0x3a0 [ 179.731885] ? kthread_complete_and_exit+0x40/0x40 [ 179.732615] ret_from_fork+0x22/0x30 [ 179.733167] [ 179.733534] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.734493] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.735219] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.736286] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.737456] Call Trace: [ 179.737821] [ 179.738169] __schedule+0x893/0x2470 [ 179.738749] ? io_schedule_timeout+0x150/0x150 [ 179.739401] ? do_raw_spin_lock+0x121/0x260 [ 179.740051] ? rwlock_bug.part.0+0x90/0x90 [ 179.740702] schedule+0xda/0x1b0 [ 179.741191] rescuer_thread+0x851/0xdb0 [ 179.741800] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.742541] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.743242] ? lockdep_hardirqs_on+0x79/0x100 [ 179.743908] ? worker_thread+0x1260/0x1260 [ 179.744543] kthread+0x2ed/0x3a0 [ 179.745024] ? kthread_complete_and_exit+0x40/0x40 [ 179.745756] ret_from_fork+0x22/0x30 [ 179.746330] [ 179.746705] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.747693] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.748448] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.749532] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.750722] Call Trace: [ 179.751085] [ 179.751473] __schedule+0x893/0x2470 [ 179.752025] ? io_schedule_timeout+0x150/0x150 [ 179.752706] ? mark_held_locks+0x9e/0xe0 [ 179.753291] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.754057] schedule+0xda/0x1b0 [ 179.754594] rcu_tasks_one_gp+0x3db/0xc10 [ 179.755219] rcu_tasks_kthread+0x80/0xa0 [ 179.755836] ? rcu_tasks_postscan+0x10/0x10 [ 179.756484] kthread+0x2ed/0x3a0 [ 179.756976] ? kthread_complete_and_exit+0x40/0x40 [ 179.757706] ret_from_fork+0x22/0x30 [ 179.758276] [ 179.758652] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 179.759593] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.760328] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.761460] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 179.762649] Workqueue: 0x0 (ata_sff) [ 179.763194] Call Trace: [ 179.763587] [ 179.763920] __schedule+0x893/0x2470 [ 179.764497] ? io_schedule_timeout+0x150/0x150 [ 179.765164] schedule+0xda/0x1b0 [ 179.765687] worker_thread+0x15f/0x1260 [ 179.766293] ? process_one_work+0x16a0/0x16a0 [ 179.766970] kthread+0x2ed/0x3a0 [ 179.767495] ? kthread_complete_and_exit+0x40/0x40 [ 179.768194] ret_from_fork+0x22/0x30 [ 179.768783] [ 179.775080] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.776059] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.776837] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.778117] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 179.779302] Workqueue: 0x0 (kblockd) [ 179.779890] Call Trace: [ 179.780261] [ 179.780627] __schedule+0x893/0x2470 [ 179.781180] ? io_schedule_timeout+0x150/0x150 [ 179.781881] schedule+0xda/0x1b0 [ 179.782398] worker_thread+0x15f/0x1260 [ 179.783027] ? process_one_work+0x16a0/0x16a0 [ 179.783703] kthread+0x2ed/0x3a0 [ 179.784202] ? kthread_complete_and_exit+0x40/0x40 [ 179.784923] ret_from_fork+0x22/0x30 [ 179.785515] [ 179.785870] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.786943] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.787787] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.788994] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.790316] Call Trace: [ 179.790761] [ 179.791133] __schedule+0x893/0x2470 [ 179.791783] ? io_schedule_timeout+0x150/0x150 [ 179.792557] ? do_raw_spin_lock+0x121/0x260 [ 179.793253] ? rwlock_bug.part.0+0x90/0x90 [ 179.793971] schedule+0xda/0x1b0 [ 179.794592] rescuer_thread+0x851/0xdb0 [ 179.795179] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.795924] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.796669] ? lockdep_hardirqs_on+0x79/0x100 [ 179.797318] ? worker_thread+0x1260/0x1260 [ 179.797968] kthread+0x2ed/0x3a0 [ 179.798504] ? kthread_complete_and_exit+0x40/0x40 [ 179.799210] ret_from_fork+0x22/0x30 [ 179.799797] [ 179.800194] [ 179.800194] Showing all locks held in the system: [ 179.801091] 1 lock held by rcu_tasks_kthre/11: [ 179.801744] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.803133] 1 lock held by khungtaskd/25: [ 179.803735] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.805048] 2 locks held by in:imklog/204: [ 179.805662] #0: ffff88800ef5f268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 179.806900] #1: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: __schedule+0x1cf/0x2470 [ 179.808128] 2 locks held by syz-executor/5006: [ 179.808791] [ 179.809039] ============================================= [ 179.809039] 04:27:51 executing program 3: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/73) r0 = msgget(0x1, 0x400) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000080)=""/144) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000140)=""/4096) keyctl$get_security(0x11, 0x0, &(0x7f0000001140)=""/43, 0x2b) syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) msgrcv(r0, &(0x7f00000011c0)={0x0, ""/33}, 0x29, 0x0, 0x2000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001200)=""/249) r1 = msgget(0x3, 0x20) msgrcv(r1, &(0x7f0000001300)={0x0, ""/188}, 0xc4, 0x3, 0x2800) r2 = msgget(0x3, 0x308) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000001400)=""/142) r3 = msgget(0x0, 0x180) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000014c0)={'wlan0\x00'}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000001500)=""/52) msgrcv(r3, &(0x7f0000001540)={0x0, ""/4096}, 0x1008, 0x3, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f00000025c0)={0x2, 0x1, 0x8}) keyctl$negate(0xd, 0x0, 0x6, 0xfffffffffffffffc) 04:27:51 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) keyctl$get_security(0x11, r4, &(0x7f0000000c00)=""/127, 0x7f) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) 04:27:51 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x805}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1b}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x80}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x6a6}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000001}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x74, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000480)=""/231, &(0x7f0000000580)=0xe7) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb8, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x6c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7e}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000810}, 0x4050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r0, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x28}}, 0x8000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$cgroup_type(r6, &(0x7f0000000940), 0x9) 04:27:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r10, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'}) 04:27:51 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x2805b83aed062664, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x84}, 0x800) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000300)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/47, &(0x7f0000000380)=0x2f) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b2b5a92e40"}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "33d2d5cc"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "0457d911e8e0e4770575247408"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40014}, 0x4004881) socketpair(0x5610f136a730056c, 0x3, 0x8000, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x11}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8004) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xa10800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x44400}, 0x4001) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000840)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x60080440}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r5, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004020}, 0x20000000) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x54c742ecb4456523}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r6 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x201204}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x7f}, @void, @val={0xc, 0x99, {0x9, 0x56}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x31}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1ff, 0x15}}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x85}, 0x24000084) ioctl$HIDIOCSUSAGE(r3, 0x4018480c, &(0x7f0000000c40)={0x2, 0x3, 0x7, 0x9, 0x1, 0x101}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r2) 04:27:51 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) 04:27:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040040) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0x0, 0x20}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0}, '.\x00'}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x150, r2, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000b80)={{0x2, @local, 0x4e24, 0x2, 'sh\x00', 0x1, 0x1000, 0x2d}, {@multicast1, 0x4e21, 0x2, 0xf503, 0x1, 0x8000000}}, 0x44) 04:27:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x387}}, './file0\x00'}) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r10, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:51 executing program 6: ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x101, 0xfffffffc, 0x3ff}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x4, 0x200000) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0x7, 0x9, 0x5}) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x800) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000240)={0x10, "2281c43b29360d46e07db7cb1b6b8d9b"}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000280)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x7, 0x10241) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0xf38dbd35f29578cc, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1bdb8f5b07"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "97609e818ba1e3431fc7cd17ce08346e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f2533933af"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4004000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r3, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x90b}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa366}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2c040) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000640)={{0x1, 0x1, 0x18, r0, {0x15a0}}, './file0\x00'}) 04:27:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000040)=""/128) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/178) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f00000001c0)={{0x1, 0xffffffff, 0x515, 0x5, 0x6, 0x1}, 0x20c, [0x7, 0x3, 0x8, 0x80, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x3, 0x1, 0x9bc00000, 0x9, 0x1ff, 0x4, 0x74b, 0x2, 0x20, 0x6, 0x5, 0x2, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x17bc3c63, 0xfff, 0x8104, 0x8, 0x2, 0x5, 0x200, 0x3, 0x1ff, 0x3, 0x200a, 0x4, 0x4, 0xffffff81, 0x5, 0x8, 0x10001, 0x4, 0x21e3, 0x21, 0xef38, 0x7fffffff, 0x4, 0x6, 0x7, 0x8, 0x0, 0xe4f, 0x9, 0x6, 0x5, 0x7, 0x7481, 0x6, 0x8, 0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0x9, 0x7, 0x83, 0x9, 0x6, 0x80000001, 0xee9, 0x1, 0xf0000000, 0x1, 0x9, 0x8, 0x1, 0x3fd, 0x3, 0x8, 0x6, 0x2, 0xb61, 0xaad7, 0x8, 0x80000000, 0x9, 0x9, 0x5, 0x25e, 0x3, 0x8, 0x0, 0x6, 0x7, 0x2, 0xdc, 0x6, 0x4, 0x8, 0x9, 0x7fffffff, 0x6202, 0x7fffffff, 0x6, 0x80000000, 0x10001, 0x5, 0x3, 0x7fff, 0xcf, 0x3d, 0x5, 0x7, 0x4, 0x2, 0x80, 0x101, 0x81, 0x7fffffff, 0xdf0e, 0x4, 0x1, 0x5dfc, 0x3f, 0x401, 0x7227, 0x0, 0x1, 0x9, 0x5, 0x794, 0x5, 0x86, 0x1, 0x5, 0x20, 0x7fffffff, 0x1275743b, 0x1, 0x10000, 0x1, 0x2, 0x400, 0x9e7b, 0x4, 0x401, 0x4, 0x5, 0x7, 0x7, 0x7fffffff, 0x1, 0x7363da20, 0x6, 0x3, 0xb0, 0xc3da, 0x1, 0x2, 0x2, 0x5, 0x20, 0x3f, 0x7fffffff, 0x6, 0x6, 0x0, 0x0, 0xfffffb45, 0x0, 0xfb, 0x80000001, 0x7, 0x8, 0x6, 0x19, 0x1, 0x2, 0x10000000, 0x28, 0xffff7fff, 0x0, 0x1, 0x5, 0x80, 0x10000, 0xffff, 0x300, 0x6, 0xffff, 0x3, 0x6, 0x6, 0x800000, 0xfffffffe, 0x5, 0xc0000000, 0x7ff18d45, 0x0, 0x80000000, 0x42, 0x28000, 0x6e, 0x8, 0x61, 0x8, 0x5, 0x101, 0x6, 0x1, 0x8, 0xc1, 0x3, 0x7, 0x80, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0x1, 0xc4d, 0xd9f3820, 0x2, 0xfffff001, 0x349a78da, 0x6, 0x8000, 0xff, 0xfba, 0x4, 0x0, 0x6, 0x0, 0x7, 0x9, 0x0, 0x5, 0x29, 0x5, 0x80000001, 0xce0f, 0x8001, 0x8000, 0x10000000, 0x401, 0xe2, 0x4, 0x1, 0x9, 0x101, 0x6, 0x7, 0x66, 0x1, 0x2, 0x7, 0x415c, 0xcb, 0x40, 0x71, 0x72, 0x9, 0x643, 0x80000000, 0x7, 0x7, 0x0, 0x3ff, 0x4, 0x1, 0x7, 0x9, 0x7ff, 0x80000000, 0x4, 0xfff, 0x3f, 0x101, 0x7, 0x0, 0x8d, 0x8000, 0x78444f4d, 0x4c9, 0xfffffffd, 0x4, 0x8466, 0x0, 0x9, 0x2, 0x831, 0x40, 0x8730, 0x9, 0x100, 0xffffffff, 0x101, 0x7fff, 0x9, 0x35, 0x40, 0x1, 0xff, 0x800, 0xfffffffa, 0x80000000, 0x1000, 0x6, 0x3, 0x2, 0x1db7, 0x2, 0x7, 0x2, 0x6, 0x452, 0x1, 0x0, 0x6, 0x2, 0x8, 0x800000, 0x1ff, 0x80000000, 0x9, 0x8, 0x1000, 0x67a, 0x3, 0x2, 0x90aa, 0x1, 0x2, 0xce70, 0x3, 0x7f, 0x9, 0xffffcb9b, 0x8, 0x3dbac2ac, 0x1, 0x7, 0x800, 0x8, 0x6, 0x2, 0x9, 0x1, 0x101, 0x2, 0x2, 0x3, 0x1, 0xbc8, 0xfffffffb, 0x7ff, 0x51, 0x9, 0x2, 0x5, 0xb2, 0xe830, 0xfffffff9, 0x7fff, 0x3ff, 0xfffffffc, 0x4, 0x40, 0xfffffbff, 0x6, 0x10000, 0x5, 0x8, 0xfffffff7, 0x3, 0x448cc94e, 0x9, 0x81, 0x401, 0x3, 0x1, 0xfd, 0x9, 0x20, 0xa93, 0x7, 0x3da, 0x1, 0x302d, 0x1, 0x5, 0x1, 0x8, 0x10001, 0x20, 0x6, 0x0, 0x3f, 0x1ff, 0x2, 0x9, 0x16, 0x6, 0x3, 0xfff, 0xfffffbff, 0xfffffc00, 0x1, 0x4, 0x5, 0x1f, 0x20000, 0x9, 0x9, 0x7, 0x9, 0x8, 0x671, 0x5, 0x8, 0x4, 0xd2, 0x6, 0x200, 0x6, 0x0, 0x7, 0x0, 0x1, 0x4, 0x0, 0xcd9b, 0xef9, 0xfffffff9, 0x0, 0x4, 0x20, 0x40, 0x95b9, 0x3, 0x3, 0x7ff, 0x3f, 0x8000, 0x200, 0x2, 0x7ff, 0x3, 0xda23, 0xfffffffb, 0x5, 0xa, 0x3f, 0x100, 0x7, 0x7, 0x0, 0x6, 0x80000001, 0x0, 0x749, 0x7, 0x10000, 0xe3, 0x0, 0x5, 0x6c2a, 0x8000, 0x4, 0x5f, 0x4, 0x7fdc, 0x9, 0x3f, 0x1, 0x9, 0xd8, 0x75b, 0x7fff, 0x2, 0x5, 0x0, 0x2, 0x6, 0x1, 0x5, 0x100, 0x7, 0x400, 0x20, 0x0, 0x3, 0x2, 0xff, 0x1, 0x2, 0x2c, 0x800, 0x40, 0x3ff, 0x6, 0x8, 0x2bb4, 0x7fffffff, 0x0, 0x7, 0x1, 0x6, 0x3, 0xffffffff, 0xa863, 0x10001, 0x9, 0x3, 0x6, 0x5, 0x80000000, 0x9, 0x0, 0xc1, 0x6, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x6, 0x2, 0x5, 0x2, 0x8, 0xd816a26, 0x2f, 0x0, 0x7, 0x6, 0x7, 0xf4d4, 0x0, 0x8, 0x40, 0x7, 0x5, 0x5, 0x6, 0x5, 0x7ff, 0x20, 0x0, 0xfab2, 0xfffffffe, 0x4, 0x8000, 0x3425, 0x1ff, 0x100, 0x400, 0x6, 0x5ff, 0x101, 0x1, 0x40, 0x1000, 0x5, 0x8656, 0x1, 0x1000, 0x1, 0x7, 0x0, 0x4, 0x80000001, 0x2, 0x0, 0x782, 0x8, 0x2093, 0x39, 0x80, 0x100, 0x4, 0x40, 0x6, 0xfffff10a, 0x7c76b96e, 0x80000001, 0x7ff, 0x57, 0x1, 0x1, 0x3, 0x0, 0x1, 0x6, 0x8, 0x7, 0xfffffffa, 0x7fffffff, 0xfffffffe, 0x22d7, 0x3, 0x10001, 0x2, 0x3, 0xfff, 0x52000, 0x5, 0x0, 0x8001, 0x3, 0x31b, 0xffffffff, 0x3, 0x1ff, 0x401, 0x80000, 0x922, 0x3, 0x1, 0x320aae36, 0x0, 0x763e, 0x50, 0x80000000, 0x20, 0x4, 0x8a7, 0x0, 0x1, 0x200, 0x80000001, 0x8, 0x2, 0xef, 0x7, 0x9, 0x9, 0x1, 0xed45, 0x3, 0xb0c, 0x4, 0x0, 0x4, 0x2, 0x3, 0xcf31, 0x31ba, 0x5, 0x2, 0x0, 0x5, 0x10000, 0x0, 0x4, 0x7f, 0x0, 0x1ff, 0x200, 0x5, 0x8, 0x1000, 0x4, 0x7ff, 0x400, 0x2, 0x5, 0xa39, 0x7, 0x3f, 0xf6, 0xffff10c1, 0x7, 0x7f, 0x5, 0x77d1d0d0, 0x80, 0x800, 0x6, 0x33, 0x20980000, 0x1, 0x0, 0x86e, 0x1, 0x400, 0x1, 0x8, 0x9, 0x0, 0x6, 0x1f, 0x3, 0x200, 0x7f, 0x4, 0x0, 0x1000, 0x4369, 0x166, 0x0, 0x10000, 0xffffffa6, 0x8000, 0x10001, 0x9eee733e, 0xc14e, 0x8, 0x3f, 0x5, 0x3f, 0x81, 0x6, 0x1b14, 0x2, 0x3, 0x2, 0x9, 0x7, 0x10000, 0x4, 0x3, 0xffffffac, 0x9, 0x8, 0x0, 0x9, 0x4, 0x0, 0x2, 0x5, 0x1ff, 0x3, 0x14ce, 0x6, 0x4, 0x7, 0x1, 0x6, 0x6, 0x0, 0xff, 0x8, 0x2, 0x7, 0x3, 0x8, 0x20, 0x8c, 0xd5, 0xee, 0x3, 0xbd, 0x401, 0x7ff, 0x7fffffff, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x4, 0x43, 0x0, 0x6, 0x800, 0xb8ca, 0x1e, 0xedd, 0x8, 0x6, 0x0, 0x6, 0x1ff, 0x2, 0x10000, 0x5, 0x80000000, 0x20, 0x4, 0x2, 0xfffffb97, 0x7, 0x6, 0x2, 0x6000000, 0x9, 0xcb44, 0x401, 0x7fff, 0xfffffffd, 0x4, 0xfff, 0x1, 0x5, 0x8, 0x1f, 0x3, 0x8e, 0xf718, 0x9, 0x8, 0x4, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x1c681f9c, 0x100, 0x4, 0x7, 0x4, 0x5, 0x5, 0x6, 0x1ff, 0x2, 0x10000, 0x9, 0x6, 0x8926, 0xe5f7, 0x6, 0x7fffffff, 0x7, 0x6, 0x7a8, 0x8, 0x8, 0x7, 0x1, 0x2, 0x200, 0x200, 0x9, 0x4, 0x5, 0x1, 0xb2800000, 0x401, 0xfffffff7, 0x0, 0xfffe0, 0x100, 0x3, 0x7ff, 0x8000, 0x7fffffff, 0x9cb, 0x200, 0x7, 0x8, 0x0, 0x4, 0x40, 0xab0, 0xfffffc01, 0x2, 0x2, 0x3ff, 0x100, 0x3, 0x5, 0x7, 0x20d084c1, 0x9d9d, 0x0, 0xa9, 0x6, 0x7, 0x7, 0x401, 0x59, 0x100000, 0xfffffffe, 0xbe1a, 0x3, 0x3ff, 0x2, 0x8, 0x9, 0x2, 0x902, 0x2, 0xfffffff9, 0xfff, 0xff, 0xfff, 0x4, 0x3, 0x9, 0x2, 0x7fff, 0x1ff, 0xc73, 0x2, 0x2, 0x8, 0x3, 0x9, 0x1, 0x4, 0x8000, 0x4, 0x7fff, 0x1, 0x87, 0x1, 0x7f, 0x9dc, 0x4, 0xfff, 0xfff, 0xbb, 0xfff, 0x8, 0x5, 0x60, 0x100, 0x4, 0x4, 0x7, 0xcf10000, 0x4, 0x80, 0x4, 0x0, 0x8000, 0x40, 0xfff, 0x897, 0x5, 0x3, 0x7, 0x80000001, 0x3, 0x1f, 0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x20, 0x1, 0x101, 0x1, 0x0, 0x80, 0x8, 0x3, 0x6, 0x5, 0x2, 0x5d7, 0x36, 0x100, 0x4, 0x1, 0x46f47c31, 0xfffff0c9, 0x4, 0x6, 0x1, 0x131f1df9, 0x80, 0x3f, 0x20, 0xff, 0x0, 0x6, 0xfff, 0x2, 0x7, 0x4, 0x400, 0xffff, 0x8001, 0x8, 0x8, 0x10001, 0x20, 0x9, 0x2, 0x1f, 0x2, 0x660, 0x40, 0x8001, 0x1d5e0000, 0x0, 0x80000000, 0x4, 0x2, 0x3, 0x3ff, 0x1ff, 0x2, 0x8, 0x40, 0x1, 0x6, 0x400, 0xfff, 0x7ff, 0x8a, 0x1, 0x891, 0xfffffff9, 0xff, 0x2, 0xffff, 0x55, 0x85c]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000001240)={0x3, 0x200, 0xfffff801, 0xc6, 0x9381, 0x7b6a84d7}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x60, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "e36dd5"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "458ba47de2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e5967a694aca46497eeddeb979"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0), 0x161a02, 0x0) r6 = accept4$inet(r1, 0x0, &(0x7f0000001400), 0xc0000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000001440)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000001480), 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2, {0x7f}}, './file0\x00'}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 04:27:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) process_mrelease(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x400, 0x4}}, './file0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044010}, 0x40000) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f00000002c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r5, {r6, 0xee00}}, './file0\x00'}) r8 = getpid() sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x56}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7f24696a7d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x2004000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r7) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r9, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) clone3(&(0x7f0000000940)={0x8220300, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0, {0x31}, &(0x7f0000000780)=""/201, 0xc9, &(0x7f0000000880)=""/96, &(0x7f0000000900)=[0xffffffffffffffff, r8, r8, r8, r8, r8, r8, r8, r8], 0x9, {r0}}, 0x58) syz_open_procfs$namespace(r10, &(0x7f00000009c0)='ns/time_for_children\x00') 04:27:51 executing program 7: r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="79096ebd1cf983527c3e766942b028d0b97e0c63d674", 0x16, 0xfffffffffffffff9) r1 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='*{&\x00', 0xfffffffffffffffb) keyctl$update(0x2, r0, 0x0, 0x0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="b028957ab026925cfa9d765cadddbedd6a70d2c574782d3a1d335cce212d9acf0bfa00cd0feeeeb85969a78e22b46d44e9ad4d22ef0623a705b2c2c8f56fd3b4691c591c", 0x44, r1) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r1, 0x1) r3 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="9f76a067c643ef2f97a809a8691d9f046c51d48f47ca8291ab17ee0483fcff3064f9406a262de6b4e0176d0682f65a8571d84197e931a99b17", 0x39, r1) r4 = add_key$user(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)="5939e09356ce30a5a24445ee7390fdd3f54bd24baf64bc48d06be2053c0731e65a903f430e10d467f4e0f799", 0x2c, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="e8956a6b8ff0256d1419f6fb640894e07b8cd7119a0248b25bbf284a830144efd13e57d44f21feb6eae8cc95587504a2146c325292817bae3e44495a9a6cdca3b8782bfc3d5ac7e4957525c856615937c22c05420258b41dc137fe07cbd9ca778af9f6b79fcf823c6db104d9b9db4f6450c48dc43e1512f0483134756417030350a5e53494a9455164c2951fb4691c9dc8fdec2c8ce2ba55661c202254638a7c9d9ddf1e7f0ce1edd4e10643e10c5bebaaaa9771b914c3e97a7a2307d689b0ca55f38fdc7436c545e55e19be8d17993282", 0xd1, r1) keyctl$dh_compute(0x17, &(0x7f0000000580)={r3, r4, r5}, &(0x7f00000005c0)=""/95, 0x5f, &(0x7f0000000700)={&(0x7f0000000640)={'sha256-ni\x00'}, &(0x7f0000000680)="aec1a2ddfae7d6091048c6616f64a8cc42020183ff3d021bb884df22cb5bdcffd0c465b6b8730c63a2823729ae56f29c9317b253998c088beede0e85b6654129220488b01919c1bbca7d44430654c02d47a79a8478f1b834f64ba20ae246e5acb03a3c", 0x63}) r6 = request_key(&(0x7f0000000740)='encrypted\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)='\x00', r1) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r6}, &(0x7f0000000840)=""/30, 0x1e, &(0x7f00000009c0)={&(0x7f0000000880)={'sha3-512\x00'}, &(0x7f00000008c0)="4c7b0260f23b208814996cf8991b8ec3b7244b212ac53dbaff5b496ebe695ecf45701204d05f94d3edee13ede0877703649d166ac0b70410d391947d1e5c8cf3d6bd80e398c50c90c8b6da3553077c863941f643f2f3175e0cc7ce1deaaebac34958d9f2fd329217c3554bc57f84d4ba25535b896119b6223af4c5026dcc635b923e97e0740ec5b0a661f7e6076d0a8831889d4b5dac5a6f0705f597878c90c5770cfc047716114555a51faf3a46e78818123a2c7692bf71eb342ce2d7bb948153caa5d8d127f6fad38265c82677134daf260c90c85f2d012bc4bb00c9085e4083017c7a79969d120598c3c2", 0xec}) r7 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc3}, &(0x7f0000000a80)={0x0, "5bf46d81c165c2a1aba2f5211b6e7a81ea4135ee906bd39e4a0f6fa9134f56e166b0e639bbc7608e5c18cf3b7b0a87b308c4f93c2113cb7dfc5bd22eb4d2a862", 0x3b}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, &(0x7f0000000b00)=""/104, 0x68) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, &(0x7f0000000b80)='%{\x00', &(0x7f0000000bc0)) add_key$keyring(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x3}, 0x0, 0x0, r1) VM DIAGNOSIS: 04:27:48 Registers: info registers vcpu 0 RAX=ffff888036530000 RBX=ffff8880730ea618 RCX=ffffffff817bd091 RDX=1ffff11006ca6000 RSI=0000000000000008 RDI=ffff888036530000 RBP=dffffc0000000000 RSP=ffff8880382f7aa0 R8 =0000000000000000 R9 =ffff888036530007 R10=ffffed1006ca6000 R11=0000000000000001 R12=ffff8880730eaff9 R13=ffff888036530000 R14=ffffffffffffffff R15=0000000000000086 RIP=ffffffff817bd3b3 RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555557234400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055661e843648 CR3=00000000103d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000002f R11=0000000000000001 R12=000000000000002f R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe21af1c220 CR3=0000000005226000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4168f3e400000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000