Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:31580' (ECDSA) to the list of known hosts. 2022/09/30 15:59:06 fuzzer started 2022/09/30 15:59:07 dialing manager at localhost:40535 syzkaller login: [ 36.583214] cgroup: Unknown subsys name 'net' [ 36.667974] cgroup: Unknown subsys name 'rlimit' 2022/09/30 15:59:22 syscalls: 200 2022/09/30 15:59:22 code coverage: enabled 2022/09/30 15:59:22 comparison tracing: enabled 2022/09/30 15:59:22 extra coverage: enabled 2022/09/30 15:59:22 setuid sandbox: enabled 2022/09/30 15:59:22 namespace sandbox: enabled 2022/09/30 15:59:22 Android sandbox: enabled 2022/09/30 15:59:22 fault injection: enabled 2022/09/30 15:59:22 leak checking: enabled 2022/09/30 15:59:22 net packet injection: enabled 2022/09/30 15:59:22 net device setup: enabled 2022/09/30 15:59:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 15:59:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 15:59:22 USB emulation: enabled 2022/09/30 15:59:22 hci packet injection: enabled 2022/09/30 15:59:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 15:59:22 802.15.4 emulation: enabled 2022/09/30 15:59:22 fetching corpus: 0, signal 0/0 (executing program) 2022/09/30 15:59:23 starting 8 fuzzer processes 15:59:23 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 15:59:23 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x6c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x51}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d}, 0x800) 15:59:23 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) [ 52.465457] audit: type=1400 audit(1664553563.765:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:59:23 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040884}, 0x80) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x2a000080}, 0x84c5) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c02f8d4dc842239b620877"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1e2fa02c64"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 15:59:23 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffff33df}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xaf}}, './file1/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) 15:59:23 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0xe2}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000ac0)={0x1, 0x0, @status={[0xffffffff, 0x9b28, 0xf68000000, 0x6, 0x9, 0x50d61928]}, [0x6, 0x0, 0x8, 0xf0, 0xd172, 0x5, 0x0, 0xfffffffffffffffd, 0x9, 0x401, 0x100000000, 0xffffffff7fffffff, 0x7ff, 0x0, 0x7, 0x0, 0x9, 0x7, 0x3, 0xfffffffffffffffc, 0x10000, 0x4, 0xfffffffffffff000, 0x866, 0x9, 0x3, 0x5, 0x81, 0x1, 0x4, 0x9, 0x8001, 0x92, 0x1, 0x6, 0x8, 0x10001, 0x2, 0x2, 0x100000000, 0x3, 0xa00000000, 0x100000000, 0x6, 0x20, 0x0, 0x3a4, 0xfff, 0x7fffffff, 0x8, 0x4, 0x35, 0x58c3, 0x2, 0x5, 0x3, 0x8, 0x9, 0x8, 0x4b48, 0x7ff, 0x8, 0x100000001, 0x7b]}) 15:59:23 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003a40)={r6, 0x20, 0x7, 0x1}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20050090) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, ["", ""]}, 0x1c}}, 0x804) 15:59:23 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r8, r9/1000+60000}) [ 53.651006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.653941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.657119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.660543] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.662796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.664470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.669595] Bluetooth: hci0: HCI_REQ-0x0c1a [ 53.701545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.706542] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.708490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.710544] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.711716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.714207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.716155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.722238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.724923] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.726521] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.730734] Bluetooth: hci3: HCI_REQ-0x0c1a [ 53.747998] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.751013] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.754385] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.756579] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.759190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.760574] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.763649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.765067] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.770371] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.777095] Bluetooth: hci1: HCI_REQ-0x0c1a [ 53.830216] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.833860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.835951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.839400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.841916] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.843862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 53.845729] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.847645] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 53.849554] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 53.853755] Bluetooth: hci4: HCI_REQ-0x0c1a [ 53.866917] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 53.878164] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 53.881424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 53.889815] Bluetooth: hci6: HCI_REQ-0x0c1a [ 55.730221] Bluetooth: hci0: command 0x0409 tx timeout [ 55.793792] Bluetooth: hci2: command 0x0409 tx timeout [ 55.794505] Bluetooth: hci1: command 0x0409 tx timeout [ 55.795167] Bluetooth: hci3: command 0x0409 tx timeout [ 55.795924] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 55.857784] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 55.857900] Bluetooth: hci4: command 0x0409 tx timeout [ 55.921853] Bluetooth: hci6: command 0x0409 tx timeout [ 57.777728] Bluetooth: hci0: command 0x041b tx timeout [ 57.841791] Bluetooth: hci3: command 0x041b tx timeout [ 57.841914] Bluetooth: hci1: command 0x041b tx timeout [ 57.842240] Bluetooth: hci2: command 0x041b tx timeout [ 57.905727] Bluetooth: hci4: command 0x041b tx timeout [ 57.969777] Bluetooth: hci6: command 0x041b tx timeout [ 59.825757] Bluetooth: hci0: command 0x040f tx timeout [ 59.889810] Bluetooth: hci2: command 0x040f tx timeout [ 59.889835] Bluetooth: hci1: command 0x040f tx timeout [ 59.889879] Bluetooth: hci3: command 0x040f tx timeout [ 59.953972] Bluetooth: hci4: command 0x040f tx timeout [ 60.017734] Bluetooth: hci6: command 0x040f tx timeout [ 60.849728] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 60.977741] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 61.874752] Bluetooth: hci0: command 0x0419 tx timeout [ 61.937801] Bluetooth: hci3: command 0x0419 tx timeout [ 61.938641] Bluetooth: hci1: command 0x0419 tx timeout [ 61.939460] Bluetooth: hci2: command 0x0419 tx timeout [ 62.001752] Bluetooth: hci4: command 0x0419 tx timeout [ 62.065747] Bluetooth: hci6: command 0x0419 tx timeout [ 63.726540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.742230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.743184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.756917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.764337] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 63.766552] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.786803] Bluetooth: hci5: HCI_REQ-0x0c1a [ 63.878400] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.886401] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.888047] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.891140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.893553] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 63.895127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.904773] Bluetooth: hci7: HCI_REQ-0x0c1a [ 65.841896] Bluetooth: hci5: command 0x0409 tx timeout [ 65.969779] Bluetooth: hci7: command 0x0409 tx timeout [ 67.890847] Bluetooth: hci5: command 0x041b tx timeout [ 68.017862] Bluetooth: hci7: command 0x041b tx timeout [ 69.937769] Bluetooth: hci5: command 0x040f tx timeout [ 70.065792] Bluetooth: hci7: command 0x040f tx timeout [ 71.985729] Bluetooth: hci5: command 0x0419 tx timeout [ 72.113841] Bluetooth: hci7: command 0x0419 tx timeout 16:00:38 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0xe2}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000ac0)={0x1, 0x0, @status={[0xffffffff, 0x9b28, 0xf68000000, 0x6, 0x9, 0x50d61928]}, [0x6, 0x0, 0x8, 0xf0, 0xd172, 0x5, 0x0, 0xfffffffffffffffd, 0x9, 0x401, 0x100000000, 0xffffffff7fffffff, 0x7ff, 0x0, 0x7, 0x0, 0x9, 0x7, 0x3, 0xfffffffffffffffc, 0x10000, 0x4, 0xfffffffffffff000, 0x866, 0x9, 0x3, 0x5, 0x81, 0x1, 0x4, 0x9, 0x8001, 0x92, 0x1, 0x6, 0x8, 0x10001, 0x2, 0x2, 0x100000000, 0x3, 0xa00000000, 0x100000000, 0x6, 0x20, 0x0, 0x3a4, 0xfff, 0x7fffffff, 0x8, 0x4, 0x35, 0x58c3, 0x2, 0x5, 0x3, 0x8, 0x9, 0x8, 0x4b48, 0x7ff, 0x8, 0x100000001, 0x7b]}) 16:00:38 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 16:00:38 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x6c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x51}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d}, 0x800) 16:00:39 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040884}, 0x80) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x2a000080}, 0x84c5) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c02f8d4dc842239b620877"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1e2fa02c64"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 16:00:39 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003a40)={r6, 0x20, 0x7, 0x1}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20050090) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, ["", ""]}, 0x1c}}, 0x804) 16:00:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r8, r9/1000+60000}) 16:00:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffff33df}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xaf}}, './file1/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) 16:00:39 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 16:00:39 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003a40)={r6, 0x20, 0x7, 0x1}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20050090) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, ["", ""]}, 0x1c}}, 0x804) 16:00:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r8, r9/1000+60000}) 16:00:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x6c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x51}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d}, 0x800) 16:00:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r8, r9/1000+60000}) 16:00:39 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0xe2}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000ac0)={0x1, 0x0, @status={[0xffffffff, 0x9b28, 0xf68000000, 0x6, 0x9, 0x50d61928]}, [0x6, 0x0, 0x8, 0xf0, 0xd172, 0x5, 0x0, 0xfffffffffffffffd, 0x9, 0x401, 0x100000000, 0xffffffff7fffffff, 0x7ff, 0x0, 0x7, 0x0, 0x9, 0x7, 0x3, 0xfffffffffffffffc, 0x10000, 0x4, 0xfffffffffffff000, 0x866, 0x9, 0x3, 0x5, 0x81, 0x1, 0x4, 0x9, 0x8001, 0x92, 0x1, 0x6, 0x8, 0x10001, 0x2, 0x2, 0x100000000, 0x3, 0xa00000000, 0x100000000, 0x6, 0x20, 0x0, 0x3a4, 0xfff, 0x7fffffff, 0x8, 0x4, 0x35, 0x58c3, 0x2, 0x5, 0x3, 0x8, 0x9, 0x8, 0x4b48, 0x7ff, 0x8, 0x100000001, 0x7b]}) 16:00:39 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffff33df}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xaf}}, './file1/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) 16:00:39 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040884}, 0x80) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x2a000080}, 0x84c5) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c02f8d4dc842239b620877"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1e2fa02c64"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 16:00:39 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)) 16:00:39 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x6c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x51}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80d}, 0x800) 16:00:50 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffff33df}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xaf}}, './file1/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) 16:00:50 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003a40)={r6, 0x20, 0x7, 0x1}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20050090) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000004000)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f80)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x26}, @void, @void}}, ["", ""]}, 0x1c}}, 0x804) 16:00:50 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040884}, 0x80) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x2a000080}, 0x84c5) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c02f8d4dc842239b620877"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1e2fa02c64"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 16:00:50 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 16:00:50 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0xe2}}, './file0\x00'}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000ac0)={0x1, 0x0, @status={[0xffffffff, 0x9b28, 0xf68000000, 0x6, 0x9, 0x50d61928]}, [0x6, 0x0, 0x8, 0xf0, 0xd172, 0x5, 0x0, 0xfffffffffffffffd, 0x9, 0x401, 0x100000000, 0xffffffff7fffffff, 0x7ff, 0x0, 0x7, 0x0, 0x9, 0x7, 0x3, 0xfffffffffffffffc, 0x10000, 0x4, 0xfffffffffffff000, 0x866, 0x9, 0x3, 0x5, 0x81, 0x1, 0x4, 0x9, 0x8001, 0x92, 0x1, 0x6, 0x8, 0x10001, 0x2, 0x2, 0x100000000, 0x3, 0xa00000000, 0x100000000, 0x6, 0x20, 0x0, 0x3a4, 0xfff, 0x7fffffff, 0x8, 0x4, 0x35, 0x58c3, 0x2, 0x5, 0x3, 0x8, 0x9, 0x8, 0x4b48, 0x7ff, 0x8, 0x100000001, 0x7b]}) 16:00:50 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 16:00:50 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)) 16:00:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x6c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x4}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10d8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) 16:00:50 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003a40)={r6, 0x20, 0x7, 0x1}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000003f00)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003e80)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20050090) 16:00:51 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x2, 0x2, 0x20, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x10, 0x0, 0x40}}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)) 16:01:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffff33df}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000000500)={{0x1, 0x1, 0x18, r5, {0xaf}}, './file1/file0\x00'}) 16:01:05 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040884}, 0x80) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) sendmsg$NLBL_MGMT_C_VERSION(r5, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x64}, 0x1, 0x0, 0x0, 0x2a000080}, 0x84c5) 16:01:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r2) 16:01:05 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000003a40)={r6, 0x20, 0x7, 0x1}) 16:01:05 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0xe2}}, './file0\x00'}) 16:01:05 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 16:01:05 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r7, r8/1000+60000}) 16:01:05 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 16:01:05 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000002a40)={0x0, "7c4cbed78b827ae979eaa3e242bf6e8d"}) 16:01:05 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r8, {0xe2}}, './file0\x00'}) 16:01:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x30, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xdb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x20004041) 16:01:05 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040884}, 0x80) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) 16:01:05 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r7, r8/1000+60000}) 16:01:05 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) 16:01:05 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xffffffffffff33df}}, './file0\x00'}) 16:01:05 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x76}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20048000}, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) 16:01:05 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 16:01:05 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) 16:01:05 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r7, r8/1000+60000}) 16:01:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, r4, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x9b}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x74}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xd}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008805}, 0x40000) 16:01:19 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) 16:01:19 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) 16:01:19 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 16:01:19 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0xa) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r7, r8/1000+60000}) 16:01:19 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 16:01:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x74}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x39e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7f}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x87}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x417}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0xc0}, 0x1, 0x0, 0x0, 0xc000}, 0xc4) 16:01:19 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r10, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r11, {0x1}}, './file0\x00'}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) 16:01:19 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, r7, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) 16:01:19 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r6, r7/1000+60000}) 16:01:19 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x12c, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x100, 0x2a, [@random_vendor={0xdd, 0xf2, "ff48e75594cffcc6cb27365c79f072de2ba1019ba722e4d8769997229384674380a150a3c45b7bab7d56253e826820b7458358bee2170ea411647ab71b34a61d534db6cce4ccd8d104f8bd148bb87a5939bad596500726a3d315b13d62c8ef765160fb41750e966024467ef59258003e269a7cdb142e245b9be770ceba318f86cf7ac0fa63b1f12d669ce4964d5c3e04fccdbe956a90ed51016a7e71d1f1612020371ffddc64c42917079b00271fa2222489e7ee3860ab48320df00d63bead2a310af112267442c050114ab93e54b77453a00b42d8444d826f744801019cd89b545167931f4c1ab7bc8b4a096eaaddf6f696"}, @mesh_chsw={0x76, 0x6, {0x1, 0x7, 0xb, 0x5}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xc}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40}, 0x4008091) 16:01:19 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r5}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000028c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 16:01:19 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r7) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r5, {r6}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r6, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) write$P9_RLINK(r3, &(0x7f0000000400)={0x7, 0x47, 0x1}, 0x7) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) 16:01:19 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x10000, 0x36}}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) 16:01:19 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r6, r7/1000+60000}) 16:01:19 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r4}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f00000018c0)={{r3}, 0x0, 0xc, @inherit={0x78, &(0x7f0000001840)={0x0, 0x6, 0x5, 0x81, {0x10, 0x7f, 0x15b, 0x2, 0x3}, [0x9, 0x1, 0x20, 0x7685, 0x3ff, 0x40]}}, @devid}) 16:01:19 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r7, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r8, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r10, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$MON_IOCQ_RING_SIZE(r6, 0x9205) 16:01:19 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, @out_args}, './file0/file0\x00'}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r6, r7/1000+60000}) 16:01:19 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) 16:01:19 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'PPPPPP'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) [ 179.570044] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.571333] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.572253] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.573523] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.574942] Call Trace: [ 179.575387] [ 179.576076] __schedule+0x893/0x2470 [ 179.577260] ? io_schedule_timeout+0x150/0x150 [ 179.578523] ? do_raw_spin_lock+0x121/0x260 [ 179.579389] ? rwlock_bug.part.0+0x90/0x90 [ 179.580091] schedule+0xda/0x1b0 [ 179.580636] rescuer_thread+0x851/0xdb0 [ 179.581300] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.582097] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.582923] ? lockdep_hardirqs_on+0x79/0x100 [ 179.583619] ? worker_thread+0x1260/0x1260 [ 179.584310] kthread+0x2ed/0x3a0 [ 179.584885] ? kthread_complete_and_exit+0x40/0x40 [ 179.585646] ret_from_fork+0x22/0x30 [ 179.586307] [ 179.586710] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.587722] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.588517] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.589708] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.591019] Call Trace: [ 179.591412] [ 179.591809] __schedule+0x893/0x2470 [ 179.592395] ? io_schedule_timeout+0x150/0x150 [ 179.593126] ? do_raw_spin_lock+0x121/0x260 [ 179.593834] ? rwlock_bug.part.0+0x90/0x90 [ 179.594524] schedule+0xda/0x1b0 [ 179.595102] rescuer_thread+0x851/0xdb0 [ 179.595764] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.596528] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.597296] ? lockdep_hardirqs_on+0x79/0x100 [ 179.597999] ? worker_thread+0x1260/0x1260 [ 179.598703] kthread+0x2ed/0x3a0 [ 179.599215] ? kthread_complete_and_exit+0x40/0x40 [ 179.599976] ret_from_fork+0x22/0x30 [ 179.600559] [ 179.600946] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.601941] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.602787] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.603992] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.605300] Call Trace: [ 179.605741] [ 179.606103] __schedule+0x893/0x2470 [ 179.606754] ? io_schedule_timeout+0x150/0x150 [ 179.607470] ? do_raw_spin_lock+0x121/0x260 [ 179.608200] ? rwlock_bug.part.0+0x90/0x90 [ 179.608740] Bluetooth: hci0: command 0x0406 tx timeout [ 179.608938] schedule+0xda/0x1b0 [ 179.609336] Bluetooth: hci3: command 0x0406 tx timeout [ 179.609858] rescuer_thread+0x851/0xdb0 [ 179.610241] Bluetooth: hci1: command 0x0406 tx timeout [ 179.610869] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.611248] Bluetooth: hci4: command 0x0406 tx timeout [ 179.612010] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.612386] Bluetooth: hci2: command 0x0406 tx timeout [ 179.613148] ? lockdep_hardirqs_on+0x79/0x100 [ 179.613521] Bluetooth: hci6: command 0x0406 tx timeout [ 179.614168] ? worker_thread+0x1260/0x1260 [ 179.615313] kthread+0x2ed/0x3a0 [ 179.615826] ? kthread_complete_and_exit+0x40/0x40 [ 179.616513] ret_from_fork+0x22/0x30 [ 179.617084] [ 179.617416] INFO: task netns:6 blocked for more than 143 seconds. [ 179.618255] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.619038] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.620134] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.621345] Call Trace: [ 179.621760] [ 179.622099] __schedule+0x893/0x2470 [ 179.622707] ? io_schedule_timeout+0x150/0x150 [ 179.623376] ? do_raw_spin_lock+0x121/0x260 [ 179.624037] ? rwlock_bug.part.0+0x90/0x90 [ 179.624712] schedule+0xda/0x1b0 [ 179.625221] rescuer_thread+0x851/0xdb0 [ 179.625846] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.626582] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.627340] ? lockdep_hardirqs_on+0x79/0x100 [ 179.628047] ? worker_thread+0x1260/0x1260 [ 179.628704] kthread+0x2ed/0x3a0 [ 179.629209] ? kthread_complete_and_exit+0x40/0x40 [ 179.629968] ret_from_fork+0x22/0x30 [ 179.630557] [ 179.630936] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 179.631897] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.632650] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.633794] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.635022] Workqueue: 0x0 (rcu_gp) [ 179.635574] Call Trace: [ 179.635984] [ 179.636335] __schedule+0x893/0x2470 [ 179.636937] ? io_schedule_timeout+0x150/0x150 [ 179.637624] schedule+0xda/0x1b0 [ 179.638158] worker_thread+0x15f/0x1260 [ 179.638822] ? process_one_work+0x16a0/0x16a0 [ 179.639489] kthread+0x2ed/0x3a0 [ 179.640029] ? kthread_complete_and_exit+0x40/0x40 [ 179.640764] ret_from_fork+0x22/0x30 [ 179.641334] [ 179.641714] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.642703] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.643474] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.644586] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 179.645809] Workqueue: 0x0 (kblockd) [ 179.646383] Call Trace: [ 179.646789] [ 179.647128] __schedule+0x893/0x2470 [ 179.647726] ? io_schedule_timeout+0x150/0x150 [ 179.648408] schedule+0xda/0x1b0 [ 179.648950] worker_thread+0x15f/0x1260 [ 179.649562] ? process_one_work+0x16a0/0x16a0 [ 179.650284] kthread+0x2ed/0x3a0 [ 179.650853] ? kthread_complete_and_exit+0x40/0x40 [ 179.651576] ret_from_fork+0x22/0x30 [ 179.652177] [ 179.652523] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.653506] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.654319] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.655444] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.656649] Call Trace: [ 179.657058] [ 179.657395] __schedule+0x893/0x2470 [ 179.657983] ? io_schedule_timeout+0x150/0x150 [ 179.658702] ? do_raw_spin_lock+0x121/0x260 [ 179.659341] ? rwlock_bug.part.0+0x90/0x90 [ 179.660011] schedule+0xda/0x1b0 [ 179.660529] rescuer_thread+0x851/0xdb0 [ 179.661151] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.661917] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.662654] ? lockdep_hardirqs_on+0x79/0x100 [ 179.663356] ? worker_thread+0x1260/0x1260 [ 179.664008] kthread+0x2ed/0x3a0 [ 179.664507] ? kthread_complete_and_exit+0x40/0x40 [ 179.665253] ret_from_fork+0x22/0x30 [ 179.665865] [ 179.666211] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.667240] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.668028] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.669130] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.670351] Call Trace: [ 179.670770] [ 179.671115] __schedule+0x893/0x2470 [ 179.671728] ? io_schedule_timeout+0x150/0x150 [ 179.672394] ? mark_held_locks+0x9e/0xe0 [ 179.673031] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.673814] schedule+0xda/0x1b0 [ 179.674341] rcu_tasks_one_gp+0x3db/0xc10 [ 179.675023] rcu_tasks_kthread+0x80/0xa0 [ 179.675618] ? rcu_tasks_postscan+0x10/0x10 [ 179.676277] kthread+0x2ed/0x3a0 [ 179.676815] ? kthread_complete_and_exit+0x40/0x40 [ 179.677536] ret_from_fork+0x22/0x30 [ 179.678148] [ 179.679892] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.680895] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.681644] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.682796] task:kworker/1:0H state:I stack:29416 pid:21 ppid:2 flags:0x00004000 [ 179.684006] Workqueue: 0x0 (events_highpri) [ 179.684658] Call Trace: [ 179.685055] [ 179.685395] __schedule+0x893/0x2470 [ 179.685976] ? io_schedule_timeout+0x150/0x150 [ 179.686704] schedule+0xda/0x1b0 [ 179.687205] worker_thread+0x15f/0x1260 [ 179.687849] ? process_one_work+0x16a0/0x16a0 [ 179.688510] kthread+0x2ed/0x3a0 [ 179.689046] ? kthread_complete_and_exit+0x40/0x40 [ 179.689797] ret_from_fork+0x22/0x30 [ 179.690373] [ 179.690752] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.691730] Not tainted 6.0.0-rc7-next-20220929 #1 [ 179.692483] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.693601] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.694846] Call Trace: [ 179.695225] [ 179.695553] __schedule+0x893/0x2470 [ 179.696171] ? io_schedule_timeout+0x150/0x150 [ 179.696858] ? do_raw_spin_lock+0x121/0x260 [ 179.697492] ? rwlock_bug.part.0+0x90/0x90 [ 179.698153] schedule+0xda/0x1b0 [ 179.698649] rescuer_thread+0x851/0xdb0 [ 179.699255] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.699994] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.700720] ? lockdep_hardirqs_on+0x79/0x100 [ 179.701351] ? worker_thread+0x1260/0x1260 [ 179.701984] kthread+0x2ed/0x3a0 [ 179.702498] ? kthread_complete_and_exit+0x40/0x40 [ 179.703220] ret_from_fork+0x22/0x30 [ 179.703809] [ 179.704203] [ 179.704203] Showing all locks held in the system: [ 179.705077] 1 lock held by rcu_tasks_kthre/11: [ 179.705749] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.707119] 1 lock held by khungtaskd/25: [ 179.707716] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.708989] 1 lock held by systemd-journal/111: [ 179.709620] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 179.710830] 1 lock held by in:imklog/189: [ 179.711395] 4 locks held by syz-executor/4176: [ 179.712049] [ 179.712292] ============================================= [ 179.712292] 16:01:32 executing program 4: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80001, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0xffff}}, './file0\x00'}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x880) syz_genetlink_get_family_id$team(&(0x7f0000000280), r6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x721}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r2}}, './file1\x00'}) write$P9_RXATTRWALK(r5, &(0x7f00000003c0)={0xf, 0x1f, 0x1, 0x270e}, 0xf) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000480)=@ccm_128={{0x303}, "5e6f1b62d6e6fb46", "57d74ddadd7cc2f0b4a659a9a74478ce", "53123939", "a888de91b386bf4a"}, 0x28) 16:01:32 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 16:01:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16:01:32 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r3 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3, {r2, 0xee00}}, './file0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000680)={r6, 0x2, 0x4, 0x1}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000a80)={{r3}, 0x0, 0x1c, @unused=[0x7, 0x8, 0x6, 0x8f5e], @devid}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001ac0)={r7, 0x100000000, 0x2, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001ec0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002300)={0x94, 0x0, 0x20, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x270, 0x50}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0xc, 0xa, "09afb938425d4c9c"}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x46011) r9 = syz_genetlink_get_family_id$team(&(0x7f0000002480), r4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000024c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000025c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000002600)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000002700)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000002800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000002b40)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002b00)={&(0x7f0000002840)={0x28c, r9, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}]}}, {{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r11}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xed}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r1}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0x6, 0x3, 0x3f}, {0x4, 0x80, 0x1}, {0x7, 0x3, 0x7f, 0x3}, {0x6, 0x2, 0x2, 0x1}]}}}]}}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000002b80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 16:01:32 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000840)={{r4}, 0x0, 0xc, @unused=[0xffffffff00000001, 0x0, 0x0, 0x9], @devid}) 16:01:32 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r6, r7/1000+60000}) 16:01:32 executing program 6: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x20000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x240000d0}, 0x1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010101}]}, 0x1c}}, 0x1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x961}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20004081) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1a0, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x10}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xbd, 0x1, "5b53098599e354b9869312f2bc3c22ebc26c297df6588b80ece0826cbdef382089029c409bb9f4305c31ef2afd2b5c0fd643778d0c1f331a32963853f171ab2921c4ea838f55e6567e9c37380a434a232c32691991b8ea8667182716ed175ad88a23870bc7f97c5a435a70d23490dbbce71d0df3f937704dc09a1c4d3eeb2cdbbedc8ca4ec5f0c24a298f4770ba1b521634530ee554d8779241aa79a4944e3f7112854d4010bc507cd078316230757be0cac390a23e931964e"}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_6GHZ={0x5e, 0x3, "701bccef3581d21aa1160e4ab83824e1ca986a9f63e97c07a0da8496fa9ab886f0197b741fd2eca5b9579d2b623c050b1a5aca4201b0219270c2a4211ea535ba27c07c706704d76e9852781388a2e25a89adcaedc482ff3d3adf"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x859}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), r5) 16:01:32 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xff, 0x4e}}}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8001}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x200}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4080) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) 16:01:32 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x21}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5cd35875d9ca0b952f6fd79dad"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57bb67cadb"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x42}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x100}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004000}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a8, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x3}, {0x8, 0x0, 0x2e5}, {0x8, 0x0, 0x1f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x7ff}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_IE={0xa4, 0x2a, [@random_vendor={0xdd, 0x55, "5ac129b4e6c72b13e392fa3680964bbe1b6e7efd0b872df805a78eeff31a76a1121ffe40e59d5fbdb33551b2f241515fa7ba9dc55a1ca02088341503347c11327283630fab57f07ea72fb7db99cba91b719fdc8a9c"}, @preq={0x82, 0x25, @not_ext={{0x1}, 0x40, 0x5, 0xffff, @broadcast, 0x4, "", 0x5, 0x9, 0x1, [{{0x1}, @broadcast, 0xea}]}}, @chsw_timing={0x68, 0x4, {0x1, 0x5}}, @peer_mgmt={0x75, 0x16, {0x1, 0x400, @void, @val=0x8, @val="ff85a3901376db43e748f74660617964"}}, @ibss={0x6, 0x2, 0xf69a}]}, @NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0x5, 0x0, @random='i'}, {0x15, 0x0, @random="3340e421ea553e6cad6d04ab4e5760dfb5"}, {0xa, 0x0, @random="a08e48e0d33c"}, {0xf, 0x0, @random="e98931617c779a23a1601c"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x2}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1200}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x40}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40040}, 0xc008044) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002081}, 0x240080b1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x300, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x185, 0x2a, [@ibss={0x6, 0x2, 0x1}, @fast_bss_trans={0x37, 0x16f, {0x6, 0xa, "36ff115adfdcc354edb63efb6dfe4a32", "691343837f29bd4883118c8db5ba5ccc1ca823eaaeb0f808b4b20090b218dd2e", "4cb8ca37f5c58e37d646fea8afa6089196517d13a2e1a1e42cda947777779d19", [{0x3, 0x27, "8387f62efc59640d5af1a6a2d822cbb1d153709e5189e3c6dec689bf6937c5b09c904bd8c50eda"}, {0x4, 0x13, "ad2f59be623805f450f56541908eae183c3c56"}, {0x4, 0x10, "2f1322d73445a95f292d9e2ee16b6eaa"}, {0x1, 0x21, "fa7ace42205a0e2cd24495dbbd657aee828166542cfd34da8efd480ceac68ae8a8"}, {0x4, 0x19, "dd1e8bb619ac1cba9149057e2a63b60481c94d0f80bc1208d4"}, {0x3, 0x1e, "5fd5d7299481d8a5428c478367a1141286efbffa926008b42dfc5e3dfbce"}, {0x1, 0x12, "3d45207ff7f0b34ee1214910c2ff369f6a66"}, {0x4, 0xd, "bc9d17328d98b3d04fff66d17d"}, {0x4, 0x24, "b3d0a4e1a58b7e1d307b0ec755f56e4d71bcda7eeb343897dbde3a6933be03226a5131a6"}, {0x4, 0x24, "47cd38a4d9700dc0831c28e750da9f67e4eac860351556dd146a34632ea5882415069517"}]}}, @chsw_timing={0x68, 0x4, {0x81}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xa1, 0x5f}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_IE={0x117, 0x2a, [@fast_bss_trans={0x37, 0xb0, {0x0, 0x4, "4d4fdfcd43237bb2956d9f04d021058d", "72c1554e8564017b7b1a4cad2d4c41d5b3b5212528325a7570e2fc9746dfb122", "5403ac6c0e8336e8bae94ef37c28ec85532456a961493ca6a8aec7f390a6f99d", [{0x4, 0x24, "5b33ed262cccdb46dd3e64a9fa4382bcbed39872f17d34d8fe4bbbfc854803d8269adb40"}, {0x1, 0x1b, "c61d7686f0c627405d579bc98cbeb20a53c0440a1357e4a93eadc1"}, {0x3, 0xb, "b4b8884f02dc9054811ec3"}, {0x4, 0xc, "f816d2ec8e010cddd5755c38"}]}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @preq={0x82, 0x5c, @not_ext={{0x1, 0x0, 0x1}, 0xf9, 0x5, 0xba7, @broadcast, 0x7, "", 0x600, 0x81, 0x6, [{{}, @device_b, 0x1ff}, {{0x1, 0x0, 0x1}, @device_a, 0x1749}, {{0x0, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_a, 0x2}, {{0x1}, @device_a, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x401}]}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x68, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\x01\x01\x01\x01\x01\x01'}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x200088c0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000c00), 0x101000, 0x0) 16:01:32 executing program 2: write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0xa0, 0x2, 0x2}, 0x7f}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f, 0xbac}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x44) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xcf9a}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x88, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x73}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x4}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x4}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x6}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4b}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1f}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x61}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000800}, 0x41) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x62014000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x901, 0x0) 16:01:32 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) r0 = socket(0x3, 0x80000, 0x10001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in, @in=@local}}, {{@in6=@local}, 0x0, @in6=@private0}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x8c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5d5b}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x7fffffff}, {0x8, 0x0, 0x1b125f46}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x320}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040801}, 0x48011) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, 0x0, 0x55f72ddbab33b36f, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "61b23db24192cf0fc279df5db21107eddb198204a9884144"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f622b069fbea18647eb1155419d7af289949c6a9edc23e2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c8c4f5ceb8d7300f3d50889b9c8e6b4a50ef24d8f39a77d6"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d8d7453eb2d1a29556a2cbe94050913213e82cd9c9533a0b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "68b6d4646fb4592b9ea421acf689d523ec10b07bce9910d7"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "21a1b9a4049b675a3d13cc983e0ccf778b0e6c4dcf44877b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c0c24a645d2abe1338b69a4fe19d1fa9a483813afbbb12ea"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8de0b65cfc2944d92662c84e9962c001f631ed8b63862c7e"}]]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c904}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x18000000, 0x73}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x34}, 0x1, 0x0, 0x0, 0x48801}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r5, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2722c8e795"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc004}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r3, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3fb, 0x37}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3b}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 16:01:32 executing program 5: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '!\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '%\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x20000016) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80010000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, 0x0, 0xc10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f00000003c0)=@phonet, &(0x7f0000000440)=0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xc3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x20}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40010}, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x106, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x4004000) accept(0xffffffffffffffff, 0x0, &(0x7f0000000800)) 16:01:33 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xfd2d732be35c5ba5, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x800}}, './file0\x00'}) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4131dc61362ef678}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x78, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xea1a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8001}]}]}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x45e1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8d}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x41}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x501, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x51}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xa) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r4, {r2}}, './file1\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x31}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xe6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x108}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xa) openat$vcs(0xffffffffffffff9c, &(0x7f0000000740), 0xc0160, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) select(0x40, &(0x7f0000000840)={0xb17, 0x6, 0x1, 0xffffffff00000001, 0x1, 0x80, 0xfffffffffffffffb, 0x400}, &(0x7f0000000880)={0x9, 0x8, 0xfffffffffffffff9, 0x2957, 0x3f, 0x0, 0xffff, 0x4}, &(0x7f00000008c0)={0x9, 0x7fffffff, 0xff, 0x9, 0x3ff, 0x4, 0x8, 0x94b}, &(0x7f0000000940)={r6, r7/1000+60000}) [ 187.761892] Bluetooth: hci5: command 0x0406 tx timeout [ 187.762943] Bluetooth: hci7: command 0x0406 tx timeout VM DIAGNOSIS: 16:01:31 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000007e28 RCX=ffffffff8129c84d RDX=1ffffffff0d98d0c RSI=0000000000000008 RDI=ffffffff86cd3830 RBP=ffffffff86cc6860 RSP=ffff8880186c73b0 R8 =0000000000000000 R9 =ffffffff86cd3837 R10=fffffbfff0d9a706 R11=0000000000000001 R12=ffff88800d5f1ac0 R13=ffff88800d5f2460 R14=ffff88800d5f2438 R15=0000000000000000 RIP=ffffffff8129c891 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9426e07900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f94262a1350 CR3=00000000175b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 b198571852e96357 00000000000af320 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 f047468da5581c90 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000200000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005644372b00d0 CR3=000000000904c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 7465677261742e79 636e656772656d65 YMM02=0000000000000000 0000000000000000 ffffffffffffff0f 0e0d0c0b0a090807 YMM03=0000000000000000 0000000000000000 0000000000000021 0065636976726573 YMM04=0000000000000000 0000000000000000 4040404040404040 4040404040404040 YMM05=0000000000000000 0000000000000000 5a5a5a5a5a5a5a5a 5a5a5a5a5a5a5a5a YMM06=0000000000000000 0000000000000000 2020202020202020 2020202020202020 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 6563696c732e6d65 747379732f3a3a30 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000200000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000