Warning: Permanently added '[localhost]:63178' (ECDSA) to the list of known hosts. 2022/10/01 20:20:25 fuzzer started 2022/10/01 20:20:25 dialing manager at localhost:35095 syzkaller login: [ 36.751575] cgroup: Unknown subsys name 'net' [ 36.890219] cgroup: Unknown subsys name 'rlimit' 2022/10/01 20:20:40 syscalls: 201 2022/10/01 20:20:40 code coverage: enabled 2022/10/01 20:20:40 comparison tracing: enabled 2022/10/01 20:20:40 extra coverage: enabled 2022/10/01 20:20:40 setuid sandbox: enabled 2022/10/01 20:20:40 namespace sandbox: enabled 2022/10/01 20:20:40 Android sandbox: enabled 2022/10/01 20:20:40 fault injection: enabled 2022/10/01 20:20:40 leak checking: enabled 2022/10/01 20:20:40 net packet injection: enabled 2022/10/01 20:20:40 net device setup: enabled 2022/10/01 20:20:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 20:20:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 20:20:40 USB emulation: enabled 2022/10/01 20:20:40 hci packet injection: enabled 2022/10/01 20:20:40 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 20:20:40 802.15.4 emulation: enabled 2022/10/01 20:20:40 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 20:20:42 starting 8 fuzzer processes 20:20:42 executing program 0: waitid(0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) wait4(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfe39}}, './file0\x00'}) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x410300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000480)='\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r5 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000580)={0x0, "b1e184"}, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) 20:20:42 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @empty, @mcast2}}, 0x34) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x4, 0x1ff, 0x100, 0x8, 0x10}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x14, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0x7, 0xfffffffffffffff8, 0x2, 0x2, 0x1, 0xcd, 0x6, 0xc331a61}, {0x814, 0x40, 0x99c1, 0x10000}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x2, 0x3f, 0xfffff6c3, 0x3f, 0x7ff}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000000340)='./file0\x00', 0x10800, &(0x7f0000000380)={0xc, 0xfb, 0x40000, {r1}}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220080, 0x0) write$cgroup_type(r3, &(0x7f0000000400), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30b) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x2840) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r9}}, './file0\x00'}) 20:20:42 executing program 4: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xa20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4401, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000) read$ptp(r0, &(0x7f00000003c0)=""/4096, 0x1000) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r4 = socket$inet6(0xa, 0x6, 0x8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001440)={@mcast2, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0xffffff4c, 0x2, 0x8607, 0x0, 0x5, 0x204}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xec, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x8, 0x5}, {0x44, 0x6}, {0xad, 0x1}, {0x7}, {0x80, 0x5}], "5a11d141567e5032"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3f, 0x2}, {0x1, 0x5}, {0xff, 0x4}, {0x8, 0x2}, {0x8d, 0x1}, {0x3, 0x4}, {0xfb, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x8, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x6f, 0x4}, {0x0, 0x4}, {0xff, 0x5}, {0x80, 0x2}], "2e552d19b5099120"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c4406424d2b54ac8"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1, 0x6}, {0x7, 0x4}, {0x40, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1f, 0x7}, {0xd3, 0x2}, {0x4, 0x5}, {0x8, 0x4}, {0x40, 0x5}, {0x3, 0x5}], "ba024d429c38b9a2"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x7}, {0x82, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0xec, 0x7}, {0x1f, 0x5}, {0x1f, 0x3}, {0x65, 0x6}, {0xff, 0x3}, {0x7, 0x5}, {0xff, 0x6}, {0x3}, {0x3}], "329aad0cebd71e74"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x40, 0x4}, {0x2, 0x6}, {0x4d, 0x4}, {0x14, 0x7}, {0x80}, {0x0, 0x6}, {0x8, 0x2}], "8aec918cd7797eef"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x1, 0x4}, {0x1, 0x2}, {0x20, 0x7}, {0xf9, 0x5}, {0x6, 0x6}], "084171094ba236dd"}}]}, 0xec}}, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001680)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="53a707db8f6a"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, '\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4a}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc005) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001b00)={@loopback, @mcast2, @empty, 0x10001, 0x8001, 0x1, 0x100, 0x40, 0x40000000}) 20:20:42 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010848) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9001021}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048001}, 0x8004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x1, 0x530, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc894}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8020200a}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0x6, 0x3f}, {0xff}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x4}, {}, {0x3, 0x2}, {0x7f, 0x7}, {0x3, 0x5}, {0xba, 0x3}, {0x1f}, {0x40, 0x6}, {0x0, 0x3}], "89245b4603bb6bb4"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x6}, {0x9e, 0x5}, {}, {0x80, 0x7}, {0x2}, {0x3, 0x4}, {0x0, 0x7}], "1866eb0f2770d369"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x7}, {0xfb, 0x6}, {0x5, 0x6}], "f8162ffd81125f2c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x5}, {0xcc, 0x4}, {0x0, 0x6}], "09f64efcf5425b89"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "140043784e5c343d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0x2, 0x6}, {0x8, 0x6}, {0xfc, 0x2}, {0x40}, {0x40, 0x3}, {0xe9}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x5}, {0x3f, 0x5}, {0x0, 0x6}, {0x31, 0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x5}], "e171737e968aec13"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3f, 0x4}, {0x0, 0x5}, {0x20, 0x4}, {0x98, 0x6}, {0x0, 0x1}, {0xdd, 0x4}, {0x7, 0x4}, {0x81, 0x5}, {0x3, 0x5}, {0x1, 0x6}], "794210a3a44ba82d"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40a08510}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2010}, 0x48000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008040) 20:20:42 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0xd5f73b6dbb1389db, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x48004) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd25, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x308, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1eb026b6c04c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3753af5888b92a7174e9f079e9cdde7c6f2e1174aaf86d575c20123c81aa09adfb4c5c3619f01c68bf0f3cceb322a095684118bb162085ce5b89d48069506925e8977c3bf802b65f66f6d229e24faa2972da4884bbd4139042c811a6dbc343f0dc63e8e228ae96f3650cc821cd9376538030681b4e04134862671b4415d303ec60779ec6352360f8f065c5e3316abca859c272fedaac0efec86416d4baecfa73926bd2e99a1ae311b0926ee8e2e06867b8df1488f36f4428b8eaea547bdc6b45997b4897fbad175db16822092f11b752bf3b0fa671724a8e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fffc0, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36b2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8f4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "a145ae8c9c0ce15f7a62ad2982e71bda8f70376e3bf9897aaa049b813cbef617a4c19ddd7c9c842f0eeb99c7d7661af8a5043dd9ed124e3bb375558ba81b543d6f4304b2a8ef8fd082046da17596958e2c1bfe20d1f18ba3287ad07922bd933ba37aea36165f852754b240a96307bd6dbaee7eda6876b720c55137d12f0bc31b72b5179d5d1da7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xb8}}, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb0, r4, 0x4, 0x7, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f7, 0x23}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="2be8ee4f3b5872657ff6c8527959fea0395453cae68b7ff9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_PMK={0x14, 0xfe, "e6212d216dc2d773c47a87145fe9d614"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "81333a1505557218765e62f4917e95c0"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_SSID={0x18, 0x34, @random="c5e160d03fc8a7001f5ac55cf90ab1bace34a8ee"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 20:20:42 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x1000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x800, 0x7e8}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000480)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000000640)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000680)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000700)) [ 52.769923] audit: type=1400 audit(1664655642.322:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:20:42 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000008c0)=@dstopts={0x67, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xbfc8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0xc4) clock_gettime(0x5, &(0x7f0000000a40)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000a80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x102, 0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000ac0)=0x20) 20:20:42 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x8, 0x7, 0x19, 0x4}, {0x200, 0xef, 0x4, 0xb0800000}, {0xffff, 0xff, 0x81, 0x2}, {0x20, 0x2, 0x8, 0x3}, {0x5, 0x29, 0xb7, 0x1000}, {0x2b, 0x1, 0x56, 0x3}, {0xd0a, 0x2, 0x0, 0x3f}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x380}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "0bf2632d34b918aba93ac61663c1e78a0b31"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7f}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "60f583c88ba67c757509ec1c4d91e8c35e0c76a79ff787c99cd881649334703a5e8fbc6b1be86f471e73e99bd769db1f82b69409a5c6231f6f36e9497be94e9578a1fe24f38f17f07a6f1503ac842299dbd842c85d4ebfa71601929088a1c61c03a4c0dccd7274d5d6a83560e632d8a850d7d548bcc9ab12132a0fcf5afc5659d082ff069e7fdc257046c3cb65599ea97d1bb0"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4fc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xcc1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x40, 0x2}, {0xff, 0x5}, {0x9, 0x1}, {0x7, 0x6}, {0x81, 0x7}, {0xed, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x8}, {0x5a, 0x7}, {0x0, 0x2}], "e55449d06e722e9e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x1}, {0x8, 0x6}, {0x81, 0x1}, {0x1, 0x6}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x7f, 0x5}, {0xde, 0x6}, {0x0, 0x6}, {0x8}, {0x4, 0x4}, {0x6}, {0x7f, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x81, 0x7}, {0x4}, {0x40, 0x5}, {0x1, 0x1}, {}], "a8b08b0eb53555d7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8}, {0x5, 0x1}, {0x1, 0x1}, {0xff, 0x3}, {0x71, 0x4}, {0x8c, 0x3}, {0xc3, 0x7}, {0x0, 0x3}, {0x40}, {0x80, 0x1}, {0xe, 0x3}, {0x40, 0x7}, {0x4d, 0x4}, {0xc0, 0x4}, {0x7, 0x6}, {0xff, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "bb35aa1f19b30152"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x7}, {0x81, 0x4}, {0xf6, 0x2}, {0x1}, {0xfa, 0x4}, {0x3, 0x5}, {0x9, 0x3}, {0x81, 0x1}, {0x7}, {0x9, 0x1}, {0x21, 0x6}, {0x3, 0x7}, {0x9, 0x7}, {0x0, 0x7}, {0x80, 0x1}, {0xd4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x80}, {0x9, 0x6}, {0x7, 0x5}], "9ec7a3488e5ffc2a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8}, {0xb0, 0x4}, {0x69, 0x1}, {0x7, 0x2}, {0x40}, {0x40, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x2d, 0x3}, {0x32, 0x4}, {0xff, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0xff, 0x3}, {0x4}, {0x2, 0x4}, {0x6, 0x1}], "36db8d4379d69bb5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x80}, {0x34, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x7c, 0x3}, {0x2, 0x1}, {0x20, 0x7}, {0x40, 0x6}, {0x8}, {0x40, 0x4}, {0x3, 0x7}, {0x9, 0x7}, {0x40, 0x7}, {0x8, 0x6}, {0x78, 0x1}, {0x40, 0x1}, {0xa7, 0x2}, {0xa2, 0x5}, {0x0, 0x7}], "a5cbb62441f4bc53"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x7}, {0x4, 0x3}, {0x9, 0x4}, {0x7f}], "d595a3fb05c66711"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x8, 0x7}, {0x2, 0x7}], "ddeaa8c24e2b1a30"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x4}, {0x4, 0x1}, {0x8, 0x4}, {0x80, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x9, 0x4}, {0x3, 0x6}], "3bb6edadc9e39020"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000042}, 0x4c040) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000d40)={0x0, 0x10001, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6d}}, './file0\x00'}) [ 54.000960] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.002738] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.005545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.009313] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.011143] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.012536] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.017361] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.076090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.077854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.079477] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.079570] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.081002] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.082577] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.084850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.085859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.085962] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.088529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.089999] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.093582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.093969] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.101215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.102465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.103473] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.104484] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.105954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.107457] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.109111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.110835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.112076] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.113110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.116713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.117832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.118997] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.121153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.124352] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.125447] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.127053] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.128887] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.130036] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.131316] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.132582] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.134150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.134218] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.137738] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.140168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.147396] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.153708] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.154522] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.155578] Bluetooth: hci1: HCI_REQ-0x0c1a [ 54.173120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.175436] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.178143] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.187055] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.201212] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.207932] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.224632] Bluetooth: hci7: HCI_REQ-0x0c1a [ 56.081116] Bluetooth: hci0: command 0x0409 tx timeout [ 56.208902] Bluetooth: hci1: command 0x0409 tx timeout [ 56.209115] Bluetooth: hci4: command 0x0409 tx timeout [ 56.209492] Bluetooth: hci5: command 0x0409 tx timeout [ 56.210567] Bluetooth: hci6: command 0x0409 tx timeout [ 56.211047] Bluetooth: hci3: command 0x0409 tx timeout [ 56.212000] Bluetooth: hci2: command 0x0409 tx timeout [ 56.273072] Bluetooth: hci7: command 0x0409 tx timeout [ 58.128700] Bluetooth: hci0: command 0x041b tx timeout [ 58.256723] Bluetooth: hci2: command 0x041b tx timeout [ 58.256816] Bluetooth: hci3: command 0x041b tx timeout [ 58.257183] Bluetooth: hci6: command 0x041b tx timeout [ 58.257618] Bluetooth: hci5: command 0x041b tx timeout [ 58.258047] Bluetooth: hci4: command 0x041b tx timeout [ 58.258436] Bluetooth: hci1: command 0x041b tx timeout [ 58.320746] Bluetooth: hci7: command 0x041b tx timeout [ 60.176857] Bluetooth: hci0: command 0x040f tx timeout [ 60.304754] Bluetooth: hci1: command 0x040f tx timeout [ 60.305245] Bluetooth: hci4: command 0x040f tx timeout [ 60.306296] Bluetooth: hci5: command 0x040f tx timeout [ 60.306724] Bluetooth: hci6: command 0x040f tx timeout [ 60.307127] Bluetooth: hci3: command 0x040f tx timeout [ 60.307527] Bluetooth: hci2: command 0x040f tx timeout [ 60.368720] Bluetooth: hci7: command 0x040f tx timeout [ 62.224721] Bluetooth: hci0: command 0x0419 tx timeout [ 62.352726] Bluetooth: hci2: command 0x0419 tx timeout [ 62.353208] Bluetooth: hci3: command 0x0419 tx timeout [ 62.353682] Bluetooth: hci6: command 0x0419 tx timeout [ 62.354090] Bluetooth: hci5: command 0x0419 tx timeout [ 62.354500] Bluetooth: hci4: command 0x0419 tx timeout [ 62.355245] Bluetooth: hci1: command 0x0419 tx timeout [ 62.416842] Bluetooth: hci7: command 0x0419 tx timeout 20:21:38 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000008c0)=@dstopts={0x67, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xbfc8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0xc4) clock_gettime(0x5, &(0x7f0000000a40)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000a80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x102, 0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000ac0)=0x20) 20:21:38 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000008c0)=@dstopts={0x67, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xbfc8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0xc4) clock_gettime(0x5, &(0x7f0000000a40)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000a80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x102, 0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000ac0)=0x20) 20:21:39 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000008c0)=@dstopts={0x67, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xbfc8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0xc4) clock_gettime(0x5, &(0x7f0000000a40)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000a80)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x102, 0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000ac0)=0x20) 20:21:39 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000008c0)=@dstopts={0x67, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x70, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8001}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xbfc8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x801}, 0xc4) clock_gettime(0x5, &(0x7f0000000a40)) 20:21:39 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0xf, 0x7) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000008c0)=@dstopts={0x67, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1]}, 0x28) clock_gettime(0x5, &(0x7f0000000a40)) 20:21:39 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) socket$inet6(0xa, 0xf, 0x7) clock_gettime(0x5, &(0x7f0000000a40)) 20:21:39 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000880)={0xa, 0x4e21, 0x0, @private2, 0x4}, 0x1c) clock_gettime(0x5, &(0x7f0000000a40)) 20:21:39 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010848) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9001021}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048001}, 0x8004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x1, 0x530, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc894}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8020200a}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0x6, 0x3f}, {0xff}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x4}, {}, {0x3, 0x2}, {0x7f, 0x7}, {0x3, 0x5}, {0xba, 0x3}, {0x1f}, {0x40, 0x6}, {0x0, 0x3}], "89245b4603bb6bb4"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x6}, {0x9e, 0x5}, {}, {0x80, 0x7}, {0x2}, {0x3, 0x4}, {0x0, 0x7}], "1866eb0f2770d369"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x7}, {0xfb, 0x6}, {0x5, 0x6}], "f8162ffd81125f2c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x5}, {0xcc, 0x4}, {0x0, 0x6}], "09f64efcf5425b89"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "140043784e5c343d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0x2, 0x6}, {0x8, 0x6}, {0xfc, 0x2}, {0x40}, {0x40, 0x3}, {0xe9}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x5}, {0x3f, 0x5}, {0x0, 0x6}, {0x31, 0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x5}], "e171737e968aec13"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3f, 0x4}, {0x0, 0x5}, {0x20, 0x4}, {0x98, 0x6}, {0x0, 0x1}, {0xdd, 0x4}, {0x7, 0x4}, {0x81, 0x5}, {0x3, 0x5}, {0x1, 0x6}], "794210a3a44ba82d"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40a08510}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2010}, 0x48000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008040) [ 115.502437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 115.508014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 115.510566] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 115.513568] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 115.515485] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 115.517352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.521392] Bluetooth: hci6: HCI_REQ-0x0c1a [ 117.264724] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 117.264773] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 117.584797] Bluetooth: hci6: command 0x0409 tx timeout [ 119.576755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.579329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.580513] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.584538] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.586910] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.588738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.594767] Bluetooth: hci4: HCI_REQ-0x0c1a [ 119.632877] Bluetooth: hci6: command 0x041b tx timeout [ 121.616855] Bluetooth: hci4: command 0x0409 tx timeout [ 121.617701] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 121.680794] Bluetooth: hci6: command 0x040f tx timeout [ 123.664713] Bluetooth: hci4: command 0x041b tx timeout [ 123.728736] Bluetooth: hci6: command 0x0419 tx timeout [ 123.924407] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.925416] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.926744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.928484] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.929392] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.930180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.933000] Bluetooth: hci3: HCI_REQ-0x0c1a [ 125.712704] Bluetooth: hci4: command 0x040f tx timeout [ 125.968724] Bluetooth: hci3: command 0x0409 tx timeout [ 127.760702] Bluetooth: hci4: command 0x0419 tx timeout [ 128.016748] Bluetooth: hci3: command 0x041b tx timeout [ 130.065695] Bluetooth: hci3: command 0x040f tx timeout [ 132.113723] Bluetooth: hci3: command 0x0419 tx timeout [ 134.340047] audit: type=1400 audit(1664655723.892:7): avc: denied { create } for pid=5012 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 20:22:27 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x8, 0x7, 0x19, 0x4}, {0x200, 0xef, 0x4, 0xb0800000}, {0xffff, 0xff, 0x81, 0x2}, {0x20, 0x2, 0x8, 0x3}, {0x5, 0x29, 0xb7, 0x1000}, {0x2b, 0x1, 0x56, 0x3}, {0xd0a, 0x2, 0x0, 0x3f}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x380}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "0bf2632d34b918aba93ac61663c1e78a0b31"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7f}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "60f583c88ba67c757509ec1c4d91e8c35e0c76a79ff787c99cd881649334703a5e8fbc6b1be86f471e73e99bd769db1f82b69409a5c6231f6f36e9497be94e9578a1fe24f38f17f07a6f1503ac842299dbd842c85d4ebfa71601929088a1c61c03a4c0dccd7274d5d6a83560e632d8a850d7d548bcc9ab12132a0fcf5afc5659d082ff069e7fdc257046c3cb65599ea97d1bb0"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4fc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xcc1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x40, 0x2}, {0xff, 0x5}, {0x9, 0x1}, {0x7, 0x6}, {0x81, 0x7}, {0xed, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x8}, {0x5a, 0x7}, {0x0, 0x2}], "e55449d06e722e9e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x1}, {0x8, 0x6}, {0x81, 0x1}, {0x1, 0x6}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x7f, 0x5}, {0xde, 0x6}, {0x0, 0x6}, {0x8}, {0x4, 0x4}, {0x6}, {0x7f, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x81, 0x7}, {0x4}, {0x40, 0x5}, {0x1, 0x1}, {}], "a8b08b0eb53555d7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8}, {0x5, 0x1}, {0x1, 0x1}, {0xff, 0x3}, {0x71, 0x4}, {0x8c, 0x3}, {0xc3, 0x7}, {0x0, 0x3}, {0x40}, {0x80, 0x1}, {0xe, 0x3}, {0x40, 0x7}, {0x4d, 0x4}, {0xc0, 0x4}, {0x7, 0x6}, {0xff, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "bb35aa1f19b30152"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x7}, {0x81, 0x4}, {0xf6, 0x2}, {0x1}, {0xfa, 0x4}, {0x3, 0x5}, {0x9, 0x3}, {0x81, 0x1}, {0x7}, {0x9, 0x1}, {0x21, 0x6}, {0x3, 0x7}, {0x9, 0x7}, {0x0, 0x7}, {0x80, 0x1}, {0xd4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x80}, {0x9, 0x6}, {0x7, 0x5}], "9ec7a3488e5ffc2a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8}, {0xb0, 0x4}, {0x69, 0x1}, {0x7, 0x2}, {0x40}, {0x40, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x2d, 0x3}, {0x32, 0x4}, {0xff, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0xff, 0x3}, {0x4}, {0x2, 0x4}, {0x6, 0x1}], "36db8d4379d69bb5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x80}, {0x34, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x7c, 0x3}, {0x2, 0x1}, {0x20, 0x7}, {0x40, 0x6}, {0x8}, {0x40, 0x4}, {0x3, 0x7}, {0x9, 0x7}, {0x40, 0x7}, {0x8, 0x6}, {0x78, 0x1}, {0x40, 0x1}, {0xa7, 0x2}, {0xa2, 0x5}, {0x0, 0x7}], "a5cbb62441f4bc53"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x7}, {0x4, 0x3}, {0x9, 0x4}, {0x7f}], "d595a3fb05c66711"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x8, 0x7}, {0x2, 0x7}], "ddeaa8c24e2b1a30"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x4}, {0x4, 0x1}, {0x8, 0x4}, {0x80, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x9, 0x4}, {0x3, 0x6}], "3bb6edadc9e39020"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000042}, 0x4c040) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000d40)={0x0, 0x10001, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6d}}, './file0\x00'}) 20:22:27 executing program 0: waitid(0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) wait4(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfe39}}, './file0\x00'}) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x410300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000480)='\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r5 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000580)={0x0, "b1e184"}, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) 20:22:27 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) clock_gettime(0x5, &(0x7f0000000a40)) 20:22:27 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010848) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9001021}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048001}, 0x8004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x1, 0x530, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc894}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8020200a}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0x6, 0x3f}, {0xff}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x4}, {}, {0x3, 0x2}, {0x7f, 0x7}, {0x3, 0x5}, {0xba, 0x3}, {0x1f}, {0x40, 0x6}, {0x0, 0x3}], "89245b4603bb6bb4"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x6}, {0x9e, 0x5}, {}, {0x80, 0x7}, {0x2}, {0x3, 0x4}, {0x0, 0x7}], "1866eb0f2770d369"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x7}, {0xfb, 0x6}, {0x5, 0x6}], "f8162ffd81125f2c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x5}, {0xcc, 0x4}, {0x0, 0x6}], "09f64efcf5425b89"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "140043784e5c343d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0x2, 0x6}, {0x8, 0x6}, {0xfc, 0x2}, {0x40}, {0x40, 0x3}, {0xe9}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x5}, {0x3f, 0x5}, {0x0, 0x6}, {0x31, 0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x5}], "e171737e968aec13"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3f, 0x4}, {0x0, 0x5}, {0x20, 0x4}, {0x98, 0x6}, {0x0, 0x1}, {0xdd, 0x4}, {0x7, 0x4}, {0x81, 0x5}, {0x3, 0x5}, {0x1, 0x6}], "794210a3a44ba82d"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40a08510}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2010}, 0x48000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008040) 20:22:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x1000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x800, 0x7e8}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000480)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000000640)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000680)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000700)) 20:22:27 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0xd5f73b6dbb1389db, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x48004) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd25, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x308, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1eb026b6c04c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3753af5888b92a7174e9f079e9cdde7c6f2e1174aaf86d575c20123c81aa09adfb4c5c3619f01c68bf0f3cceb322a095684118bb162085ce5b89d48069506925e8977c3bf802b65f66f6d229e24faa2972da4884bbd4139042c811a6dbc343f0dc63e8e228ae96f3650cc821cd9376538030681b4e04134862671b4415d303ec60779ec6352360f8f065c5e3316abca859c272fedaac0efec86416d4baecfa73926bd2e99a1ae311b0926ee8e2e06867b8df1488f36f4428b8eaea547bdc6b45997b4897fbad175db16822092f11b752bf3b0fa671724a8e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fffc0, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36b2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8f4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "a145ae8c9c0ce15f7a62ad2982e71bda8f70376e3bf9897aaa049b813cbef617a4c19ddd7c9c842f0eeb99c7d7661af8a5043dd9ed124e3bb375558ba81b543d6f4304b2a8ef8fd082046da17596958e2c1bfe20d1f18ba3287ad07922bd933ba37aea36165f852754b240a96307bd6dbaee7eda6876b720c55137d12f0bc31b72b5179d5d1da7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xb8}}, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb0, r4, 0x4, 0x7, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f7, 0x23}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="2be8ee4f3b5872657ff6c8527959fea0395453cae68b7ff9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_PMK={0x14, 0xfe, "e6212d216dc2d773c47a87145fe9d614"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "81333a1505557218765e62f4917e95c0"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_SSID={0x18, 0x34, @random="c5e160d03fc8a7001f5ac55cf90ab1bace34a8ee"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 20:22:27 executing program 4: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xa20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4401, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000) read$ptp(r0, &(0x7f00000003c0)=""/4096, 0x1000) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r4 = socket$inet6(0xa, 0x6, 0x8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001440)={@mcast2, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0xffffff4c, 0x2, 0x8607, 0x0, 0x5, 0x204}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xec, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x8, 0x5}, {0x44, 0x6}, {0xad, 0x1}, {0x7}, {0x80, 0x5}], "5a11d141567e5032"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3f, 0x2}, {0x1, 0x5}, {0xff, 0x4}, {0x8, 0x2}, {0x8d, 0x1}, {0x3, 0x4}, {0xfb, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x8, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x6f, 0x4}, {0x0, 0x4}, {0xff, 0x5}, {0x80, 0x2}], "2e552d19b5099120"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c4406424d2b54ac8"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1, 0x6}, {0x7, 0x4}, {0x40, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1f, 0x7}, {0xd3, 0x2}, {0x4, 0x5}, {0x8, 0x4}, {0x40, 0x5}, {0x3, 0x5}], "ba024d429c38b9a2"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x7}, {0x82, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0xec, 0x7}, {0x1f, 0x5}, {0x1f, 0x3}, {0x65, 0x6}, {0xff, 0x3}, {0x7, 0x5}, {0xff, 0x6}, {0x3}, {0x3}], "329aad0cebd71e74"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x40, 0x4}, {0x2, 0x6}, {0x4d, 0x4}, {0x14, 0x7}, {0x80}, {0x0, 0x6}, {0x8, 0x2}], "8aec918cd7797eef"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x1, 0x4}, {0x1, 0x2}, {0x20, 0x7}, {0xf9, 0x5}, {0x6, 0x6}], "084171094ba236dd"}}]}, 0xec}}, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001680)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="53a707db8f6a"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, '\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4a}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc005) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001b00)={@loopback, @mcast2, @empty, 0x10001, 0x8001, 0x1, 0x100, 0x40, 0x40000000}) 20:22:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @empty, @mcast2}}, 0x34) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x4, 0x1ff, 0x100, 0x8, 0x10}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x14, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0x7, 0xfffffffffffffff8, 0x2, 0x2, 0x1, 0xcd, 0x6, 0xc331a61}, {0x814, 0x40, 0x99c1, 0x10000}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x2, 0x3f, 0xfffff6c3, 0x3f, 0x7ff}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000000340)='./file0\x00', 0x10800, &(0x7f0000000380)={0xc, 0xfb, 0x40000, {r1}}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220080, 0x0) write$cgroup_type(r3, &(0x7f0000000400), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30b) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x2840) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r9}}, './file0\x00'}) 20:22:27 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @empty, @mcast2}}, 0x34) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x4, 0x1ff, 0x100, 0x8, 0x10}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x14, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0x7, 0xfffffffffffffff8, 0x2, 0x2, 0x1, 0xcd, 0x6, 0xc331a61}, {0x814, 0x40, 0x99c1, 0x10000}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x2, 0x3f, 0xfffff6c3, 0x3f, 0x7ff}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000000340)='./file0\x00', 0x10800, &(0x7f0000000380)={0xc, 0xfb, 0x40000, {r1}}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220080, 0x0) write$cgroup_type(r3, &(0x7f0000000400), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30b) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x2840) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r9}}, './file0\x00'}) 20:22:27 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), 0xffffffffffffffff) clock_gettime(0x5, &(0x7f0000000a40)) 20:22:38 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x8, 0x7, 0x19, 0x4}, {0x200, 0xef, 0x4, 0xb0800000}, {0xffff, 0xff, 0x81, 0x2}, {0x20, 0x2, 0x8, 0x3}, {0x5, 0x29, 0xb7, 0x1000}, {0x2b, 0x1, 0x56, 0x3}, {0xd0a, 0x2, 0x0, 0x3f}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x380}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "0bf2632d34b918aba93ac61663c1e78a0b31"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7f}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "60f583c88ba67c757509ec1c4d91e8c35e0c76a79ff787c99cd881649334703a5e8fbc6b1be86f471e73e99bd769db1f82b69409a5c6231f6f36e9497be94e9578a1fe24f38f17f07a6f1503ac842299dbd842c85d4ebfa71601929088a1c61c03a4c0dccd7274d5d6a83560e632d8a850d7d548bcc9ab12132a0fcf5afc5659d082ff069e7fdc257046c3cb65599ea97d1bb0"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4fc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xcc1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x40, 0x2}, {0xff, 0x5}, {0x9, 0x1}, {0x7, 0x6}, {0x81, 0x7}, {0xed, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x8}, {0x5a, 0x7}, {0x0, 0x2}], "e55449d06e722e9e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x1}, {0x8, 0x6}, {0x81, 0x1}, {0x1, 0x6}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x7f, 0x5}, {0xde, 0x6}, {0x0, 0x6}, {0x8}, {0x4, 0x4}, {0x6}, {0x7f, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x81, 0x7}, {0x4}, {0x40, 0x5}, {0x1, 0x1}, {}], "a8b08b0eb53555d7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8}, {0x5, 0x1}, {0x1, 0x1}, {0xff, 0x3}, {0x71, 0x4}, {0x8c, 0x3}, {0xc3, 0x7}, {0x0, 0x3}, {0x40}, {0x80, 0x1}, {0xe, 0x3}, {0x40, 0x7}, {0x4d, 0x4}, {0xc0, 0x4}, {0x7, 0x6}, {0xff, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "bb35aa1f19b30152"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x7}, {0x81, 0x4}, {0xf6, 0x2}, {0x1}, {0xfa, 0x4}, {0x3, 0x5}, {0x9, 0x3}, {0x81, 0x1}, {0x7}, {0x9, 0x1}, {0x21, 0x6}, {0x3, 0x7}, {0x9, 0x7}, {0x0, 0x7}, {0x80, 0x1}, {0xd4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x80}, {0x9, 0x6}, {0x7, 0x5}], "9ec7a3488e5ffc2a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8}, {0xb0, 0x4}, {0x69, 0x1}, {0x7, 0x2}, {0x40}, {0x40, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x2d, 0x3}, {0x32, 0x4}, {0xff, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0xff, 0x3}, {0x4}, {0x2, 0x4}, {0x6, 0x1}], "36db8d4379d69bb5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x80}, {0x34, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x7c, 0x3}, {0x2, 0x1}, {0x20, 0x7}, {0x40, 0x6}, {0x8}, {0x40, 0x4}, {0x3, 0x7}, {0x9, 0x7}, {0x40, 0x7}, {0x8, 0x6}, {0x78, 0x1}, {0x40, 0x1}, {0xa7, 0x2}, {0xa2, 0x5}, {0x0, 0x7}], "a5cbb62441f4bc53"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x7}, {0x4, 0x3}, {0x9, 0x4}, {0x7f}], "d595a3fb05c66711"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x8, 0x7}, {0x2, 0x7}], "ddeaa8c24e2b1a30"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x4}, {0x4, 0x1}, {0x8, 0x4}, {0x80, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x9, 0x4}, {0x3, 0x6}], "3bb6edadc9e39020"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000042}, 0x4c040) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000d40)={0x0, 0x10001, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6d}}, './file0\x00'}) 20:22:38 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010848) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9001021}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048001}, 0x8004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x1, 0x530, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc894}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8020200a}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0x6, 0x3f}, {0xff}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x4}, {}, {0x3, 0x2}, {0x7f, 0x7}, {0x3, 0x5}, {0xba, 0x3}, {0x1f}, {0x40, 0x6}, {0x0, 0x3}], "89245b4603bb6bb4"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x6}, {0x9e, 0x5}, {}, {0x80, 0x7}, {0x2}, {0x3, 0x4}, {0x0, 0x7}], "1866eb0f2770d369"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x7}, {0xfb, 0x6}, {0x5, 0x6}], "f8162ffd81125f2c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x5}, {0xcc, 0x4}, {0x0, 0x6}], "09f64efcf5425b89"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "140043784e5c343d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0x2, 0x6}, {0x8, 0x6}, {0xfc, 0x2}, {0x40}, {0x40, 0x3}, {0xe9}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x5}, {0x3f, 0x5}, {0x0, 0x6}, {0x31, 0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x5}], "e171737e968aec13"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3f, 0x4}, {0x0, 0x5}, {0x20, 0x4}, {0x98, 0x6}, {0x0, 0x1}, {0xdd, 0x4}, {0x7, 0x4}, {0x81, 0x5}, {0x3, 0x5}, {0x1, 0x6}], "794210a3a44ba82d"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40a08510}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2010}, 0x48000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008040) 20:22:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @empty, @mcast2}}, 0x34) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x4, 0x1ff, 0x100, 0x8, 0x10}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x14, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0x7, 0xfffffffffffffff8, 0x2, 0x2, 0x1, 0xcd, 0x6, 0xc331a61}, {0x814, 0x40, 0x99c1, 0x10000}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x2, 0x3f, 0xfffff6c3, 0x3f, 0x7ff}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000000340)='./file0\x00', 0x10800, &(0x7f0000000380)={0xc, 0xfb, 0x40000, {r1}}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220080, 0x0) write$cgroup_type(r3, &(0x7f0000000400), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30b) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x2840) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {r9}}, './file0\x00'}) 20:22:38 executing program 4: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xa20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4401, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000) read$ptp(r0, &(0x7f00000003c0)=""/4096, 0x1000) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r4 = socket$inet6(0xa, 0x6, 0x8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001440)={@mcast2, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0xffffff4c, 0x2, 0x8607, 0x0, 0x5, 0x204}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xec, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x8, 0x5}, {0x44, 0x6}, {0xad, 0x1}, {0x7}, {0x80, 0x5}], "5a11d141567e5032"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3f, 0x2}, {0x1, 0x5}, {0xff, 0x4}, {0x8, 0x2}, {0x8d, 0x1}, {0x3, 0x4}, {0xfb, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x8, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x6f, 0x4}, {0x0, 0x4}, {0xff, 0x5}, {0x80, 0x2}], "2e552d19b5099120"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c4406424d2b54ac8"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1, 0x6}, {0x7, 0x4}, {0x40, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1f, 0x7}, {0xd3, 0x2}, {0x4, 0x5}, {0x8, 0x4}, {0x40, 0x5}, {0x3, 0x5}], "ba024d429c38b9a2"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x7}, {0x82, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0xec, 0x7}, {0x1f, 0x5}, {0x1f, 0x3}, {0x65, 0x6}, {0xff, 0x3}, {0x7, 0x5}, {0xff, 0x6}, {0x3}, {0x3}], "329aad0cebd71e74"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x40, 0x4}, {0x2, 0x6}, {0x4d, 0x4}, {0x14, 0x7}, {0x80}, {0x0, 0x6}, {0x8, 0x2}], "8aec918cd7797eef"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x1, 0x4}, {0x1, 0x2}, {0x20, 0x7}, {0xf9, 0x5}, {0x6, 0x6}], "084171094ba236dd"}}]}, 0xec}}, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001680)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="53a707db8f6a"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, '\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4a}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc005) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001b00)={@loopback, @mcast2, @empty, 0x10001, 0x8001, 0x1, 0x100, 0x40, 0x40000000}) 20:22:38 executing program 0: waitid(0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) wait4(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfe39}}, './file0\x00'}) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x410300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000480)='\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r5 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000580)={0x0, "b1e184"}, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) 20:22:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0xd5f73b6dbb1389db, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x48004) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd25, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x308, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1eb026b6c04c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3753af5888b92a7174e9f079e9cdde7c6f2e1174aaf86d575c20123c81aa09adfb4c5c3619f01c68bf0f3cceb322a095684118bb162085ce5b89d48069506925e8977c3bf802b65f66f6d229e24faa2972da4884bbd4139042c811a6dbc343f0dc63e8e228ae96f3650cc821cd9376538030681b4e04134862671b4415d303ec60779ec6352360f8f065c5e3316abca859c272fedaac0efec86416d4baecfa73926bd2e99a1ae311b0926ee8e2e06867b8df1488f36f4428b8eaea547bdc6b45997b4897fbad175db16822092f11b752bf3b0fa671724a8e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fffc0, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36b2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8f4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "a145ae8c9c0ce15f7a62ad2982e71bda8f70376e3bf9897aaa049b813cbef617a4c19ddd7c9c842f0eeb99c7d7661af8a5043dd9ed124e3bb375558ba81b543d6f4304b2a8ef8fd082046da17596958e2c1bfe20d1f18ba3287ad07922bd933ba37aea36165f852754b240a96307bd6dbaee7eda6876b720c55137d12f0bc31b72b5179d5d1da7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xb8}}, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb0, r4, 0x4, 0x7, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f7, 0x23}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="2be8ee4f3b5872657ff6c8527959fea0395453cae68b7ff9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_PMK={0x14, 0xfe, "e6212d216dc2d773c47a87145fe9d614"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "81333a1505557218765e62f4917e95c0"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_SSID={0x18, 0x34, @random="c5e160d03fc8a7001f5ac55cf90ab1bace34a8ee"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 20:22:38 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) clock_gettime(0x5, &(0x7f0000000a40)) 20:22:38 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x1000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x800, 0x7e8}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000480)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000000640)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000680)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000700)) 20:22:38 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x8, 0x7, 0x19, 0x4}, {0x200, 0xef, 0x4, 0xb0800000}, {0xffff, 0xff, 0x81, 0x2}, {0x20, 0x2, 0x8, 0x3}, {0x5, 0x29, 0xb7, 0x1000}, {0x2b, 0x1, 0x56, 0x3}, {0xd0a, 0x2, 0x0, 0x3f}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x380}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "0bf2632d34b918aba93ac61663c1e78a0b31"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7f}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "60f583c88ba67c757509ec1c4d91e8c35e0c76a79ff787c99cd881649334703a5e8fbc6b1be86f471e73e99bd769db1f82b69409a5c6231f6f36e9497be94e9578a1fe24f38f17f07a6f1503ac842299dbd842c85d4ebfa71601929088a1c61c03a4c0dccd7274d5d6a83560e632d8a850d7d548bcc9ab12132a0fcf5afc5659d082ff069e7fdc257046c3cb65599ea97d1bb0"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4fc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xcc1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x40, 0x2}, {0xff, 0x5}, {0x9, 0x1}, {0x7, 0x6}, {0x81, 0x7}, {0xed, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x8}, {0x5a, 0x7}, {0x0, 0x2}], "e55449d06e722e9e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x1}, {0x8, 0x6}, {0x81, 0x1}, {0x1, 0x6}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x7f, 0x5}, {0xde, 0x6}, {0x0, 0x6}, {0x8}, {0x4, 0x4}, {0x6}, {0x7f, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x81, 0x7}, {0x4}, {0x40, 0x5}, {0x1, 0x1}, {}], "a8b08b0eb53555d7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8}, {0x5, 0x1}, {0x1, 0x1}, {0xff, 0x3}, {0x71, 0x4}, {0x8c, 0x3}, {0xc3, 0x7}, {0x0, 0x3}, {0x40}, {0x80, 0x1}, {0xe, 0x3}, {0x40, 0x7}, {0x4d, 0x4}, {0xc0, 0x4}, {0x7, 0x6}, {0xff, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "bb35aa1f19b30152"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x7}, {0x81, 0x4}, {0xf6, 0x2}, {0x1}, {0xfa, 0x4}, {0x3, 0x5}, {0x9, 0x3}, {0x81, 0x1}, {0x7}, {0x9, 0x1}, {0x21, 0x6}, {0x3, 0x7}, {0x9, 0x7}, {0x0, 0x7}, {0x80, 0x1}, {0xd4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x80}, {0x9, 0x6}, {0x7, 0x5}], "9ec7a3488e5ffc2a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8}, {0xb0, 0x4}, {0x69, 0x1}, {0x7, 0x2}, {0x40}, {0x40, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x2d, 0x3}, {0x32, 0x4}, {0xff, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0xff, 0x3}, {0x4}, {0x2, 0x4}, {0x6, 0x1}], "36db8d4379d69bb5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x80}, {0x34, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x7c, 0x3}, {0x2, 0x1}, {0x20, 0x7}, {0x40, 0x6}, {0x8}, {0x40, 0x4}, {0x3, 0x7}, {0x9, 0x7}, {0x40, 0x7}, {0x8, 0x6}, {0x78, 0x1}, {0x40, 0x1}, {0xa7, 0x2}, {0xa2, 0x5}, {0x0, 0x7}], "a5cbb62441f4bc53"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x7}, {0x4, 0x3}, {0x9, 0x4}, {0x7f}], "d595a3fb05c66711"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x8, 0x7}, {0x2, 0x7}], "ddeaa8c24e2b1a30"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x4}, {0x4, 0x1}, {0x8, 0x4}, {0x80, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x9, 0x4}, {0x3, 0x6}], "3bb6edadc9e39020"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000042}, 0x4c040) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000d40)={0x0, 0x10001, 0x1000}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000d80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6d}}, './file0\x00'}) [ 179.664737] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 179.664959] Bluetooth: hci2: command 0x0406 tx timeout [ 179.665372] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.666307] Bluetooth: hci1: command 0x0406 tx timeout [ 179.666683] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.666690] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.667797] Bluetooth: hci5: command 0x0406 tx timeout [ 179.668825] Call Trace: [ 179.668832] [ 179.668842] __schedule+0x893/0x2470 [ 179.670540] Bluetooth: hci0: command 0x0406 tx timeout [ 179.670910] ? io_schedule_timeout+0x150/0x150 [ 179.671337] Bluetooth: hci7: command 0x0406 tx timeout [ 179.671487] ? do_raw_spin_lock+0x121/0x260 [ 179.673526] ? rwlock_bug.part.0+0x90/0x90 [ 179.673872] schedule+0xda/0x1b0 [ 179.674133] rescuer_thread+0x851/0xdb0 [ 179.674446] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.674856] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.675229] ? lockdep_hardirqs_on+0x79/0x100 [ 179.675568] ? worker_thread+0x1260/0x1260 [ 179.675906] kthread+0x2ed/0x3a0 [ 179.676168] ? kthread_complete_and_exit+0x40/0x40 [ 179.676538] ret_from_fork+0x22/0x30 [ 179.676858] [ 179.677037] INFO: task rcu_par_gp:4 blocked for more than 142 seconds. [ 179.677505] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.677908] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.678464] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.679090] Call Trace: [ 179.679286] [ 179.679464] __schedule+0x893/0x2470 [ 179.679774] ? io_schedule_timeout+0x150/0x150 [ 179.680118] ? do_raw_spin_lock+0x121/0x260 [ 179.680441] ? rwlock_bug.part.0+0x90/0x90 [ 179.680785] schedule+0xda/0x1b0 [ 179.681047] rescuer_thread+0x851/0xdb0 [ 179.681352] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.681741] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.682110] ? lockdep_hardirqs_on+0x79/0x100 [ 179.682494] ? worker_thread+0x1260/0x1260 [ 179.682851] kthread+0x2ed/0x3a0 [ 179.683123] ? kthread_complete_and_exit+0x40/0x40 [ 179.683501] ret_from_fork+0x22/0x30 [ 179.683828] [ 179.684016] INFO: task slub_flushwq:5 blocked for more than 142 seconds. [ 179.684513] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.684935] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.685518] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.686178] Call Trace: [ 179.686381] [ 179.686561] __schedule+0x893/0x2470 [ 179.686879] ? io_schedule_timeout+0x150/0x150 [ 179.687233] ? do_raw_spin_lock+0x121/0x260 [ 179.687578] ? rwlock_bug.part.0+0x90/0x90 [ 179.687940] schedule+0xda/0x1b0 [ 179.688217] rescuer_thread+0x851/0xdb0 [ 179.688542] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.688951] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.689344] ? lockdep_hardirqs_on+0x79/0x100 [ 179.689724] ? worker_thread+0x1260/0x1260 [ 179.690055] kthread+0x2ed/0x3a0 [ 179.690348] ? kthread_complete_and_exit+0x40/0x40 [ 179.690748] ret_from_fork+0x22/0x30 [ 179.691060] [ 179.691245] INFO: task netns:6 blocked for more than 143 seconds. [ 179.691720] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.692138] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.692737] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.693360] Call Trace: [ 179.693559] [ 179.693762] __schedule+0x893/0x2470 [ 179.694067] ? io_schedule_timeout+0x150/0x150 [ 179.694427] ? do_raw_spin_lock+0x121/0x260 [ 179.694786] ? rwlock_bug.part.0+0x90/0x90 [ 179.695133] schedule+0xda/0x1b0 [ 179.695404] rescuer_thread+0x851/0xdb0 [ 179.695739] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.696123] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.696512] ? lockdep_hardirqs_on+0x79/0x100 [ 179.696894] ? worker_thread+0x1260/0x1260 [ 179.697230] kthread+0x2ed/0x3a0 [ 179.697504] ? kthread_complete_and_exit+0x40/0x40 [ 179.697921] ret_from_fork+0x22/0x30 [ 179.698230] [ 179.698420] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.698946] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.699354] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.699954] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 179.700581] Workqueue: 0x0 (kblockd) [ 179.700910] Call Trace: [ 179.701116] [ 179.701296] __schedule+0x893/0x2470 [ 179.701599] ? io_schedule_timeout+0x150/0x150 [ 179.701987] schedule+0xda/0x1b0 [ 179.702262] worker_thread+0x15f/0x1260 [ 179.702606] ? process_one_work+0x16a0/0x16a0 [ 179.702985] kthread+0x2ed/0x3a0 [ 179.703258] ? kthread_complete_and_exit+0x40/0x40 [ 179.703661] ret_from_fork+0x22/0x30 [ 179.703964] [ 179.704150] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.704685] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.705096] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.705692] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.706328] Call Trace: [ 179.706540] [ 179.706739] __schedule+0x893/0x2470 [ 179.707040] ? io_schedule_timeout+0x150/0x150 [ 179.707399] ? do_raw_spin_lock+0x121/0x260 [ 179.707754] ? rwlock_bug.part.0+0x90/0x90 [ 179.708100] schedule+0xda/0x1b0 [ 179.708377] rescuer_thread+0x851/0xdb0 [ 179.708713] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.709103] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.709503] ? lockdep_hardirqs_on+0x79/0x100 [ 179.709882] ? worker_thread+0x1260/0x1260 [ 179.710220] kthread+0x2ed/0x3a0 [ 179.710509] ? kthread_complete_and_exit+0x40/0x40 [ 179.710919] ret_from_fork+0x22/0x30 [ 179.711224] [ 179.711410] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.711958] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.712363] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.712961] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.713600] Call Trace: [ 179.713822] [ 179.714009] __schedule+0x893/0x2470 [ 179.714317] ? io_schedule_timeout+0x150/0x150 [ 179.714701] ? mark_held_locks+0x9e/0xe0 [ 179.715024] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.715409] schedule+0xda/0x1b0 [ 179.715711] rcu_tasks_one_gp+0x3db/0xc10 [ 179.716054] rcu_tasks_kthread+0x80/0xa0 [ 179.716370] ? rcu_tasks_postscan+0x10/0x10 [ 179.716727] kthread+0x2ed/0x3a0 [ 179.717004] ? kthread_complete_and_exit+0x40/0x40 [ 179.717393] ret_from_fork+0x22/0x30 [ 179.717724] [ 179.717909] INFO: task kworker/0:1:12 blocked for more than 143 seconds. [ 179.718419] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.718846] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.719428] task:kworker/0:1 state:I stack:27208 pid:12 ppid:2 flags:0x00004000 [ 179.720084] Workqueue: 0x0 (events_power_efficient) [ 179.720476] Call Trace: [ 179.720698] [ 179.720882] __schedule+0x893/0x2470 [ 179.721190] ? io_schedule_timeout+0x150/0x150 [ 179.721554] ? rwlock_bug.part.0+0x90/0x90 [ 179.721915] schedule+0xda/0x1b0 [ 179.722187] worker_thread+0x15f/0x1260 [ 179.722527] ? __kthread_parkme+0x15a/0x220 [ 179.722893] ? process_one_work+0x16a0/0x16a0 [ 179.723252] kthread+0x2ed/0x3a0 [ 179.723526] ? kthread_complete_and_exit+0x40/0x40 [ 179.723931] ret_from_fork+0x22/0x30 [ 179.724244] [ 179.724435] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.724970] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.725377] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.725976] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 179.726624] Workqueue: 0x0 (events_highpri) [ 179.726993] Call Trace: [ 179.727197] [ 179.727381] __schedule+0x893/0x2470 [ 179.727706] ? io_schedule_timeout+0x150/0x150 [ 179.728078] schedule+0xda/0x1b0 [ 179.728352] worker_thread+0x15f/0x1260 [ 179.728711] ? process_one_work+0x16a0/0x16a0 [ 179.729066] kthread+0x2ed/0x3a0 [ 179.729334] ? kthread_complete_and_exit+0x40/0x40 [ 179.729743] ret_from_fork+0x22/0x30 [ 179.730046] [ 179.730231] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.730766] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.731172] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.731775] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.732407] Call Trace: [ 179.732613] [ 179.732814] __schedule+0x893/0x2470 [ 179.733121] ? io_schedule_timeout+0x150/0x150 [ 179.733490] ? do_raw_spin_lock+0x121/0x260 [ 179.733851] ? rwlock_bug.part.0+0x90/0x90 [ 179.734190] schedule+0xda/0x1b0 [ 179.734466] rescuer_thread+0x851/0xdb0 [ 179.734805] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.735200] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.735582] ? lockdep_hardirqs_on+0x79/0x100 [ 179.735954] ? worker_thread+0x1260/0x1260 [ 179.736291] kthread+0x2ed/0x3a0 [ 179.736555] ? kthread_complete_and_exit+0x40/0x40 [ 179.736961] ret_from_fork+0x22/0x30 [ 179.737264] [ 179.737503] [ 179.737503] Showing all locks held in the system: [ 179.737992] 1 lock held by rcu_tasks_kthre/11: [ 179.738350] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.739119] 1 lock held by khungtaskd/25: [ 179.739434] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.740158] 1 lock held by in:imklog/210: [ 179.740482] 2 locks held by syz-executor/5408: [ 179.740850] [ 179.740986] ============================================= [ 179.740986] 20:22:51 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0xd5f73b6dbb1389db, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x48004) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd25, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x308, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1eb026b6c04c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3753af5888b92a7174e9f079e9cdde7c6f2e1174aaf86d575c20123c81aa09adfb4c5c3619f01c68bf0f3cceb322a095684118bb162085ce5b89d48069506925e8977c3bf802b65f66f6d229e24faa2972da4884bbd4139042c811a6dbc343f0dc63e8e228ae96f3650cc821cd9376538030681b4e04134862671b4415d303ec60779ec6352360f8f065c5e3316abca859c272fedaac0efec86416d4baecfa73926bd2e99a1ae311b0926ee8e2e06867b8df1488f36f4428b8eaea547bdc6b45997b4897fbad175db16822092f11b752bf3b0fa671724a8e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fffc0, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36b2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8f4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "a145ae8c9c0ce15f7a62ad2982e71bda8f70376e3bf9897aaa049b813cbef617a4c19ddd7c9c842f0eeb99c7d7661af8a5043dd9ed124e3bb375558ba81b543d6f4304b2a8ef8fd082046da17596958e2c1bfe20d1f18ba3287ad07922bd933ba37aea36165f852754b240a96307bd6dbaee7eda6876b720c55137d12f0bc31b72b5179d5d1da7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xb8}}, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r6, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb0, r4, 0x4, 0x7, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f7, 0x23}}}}, [@NL80211_ATTR_SSID={0x1c, 0x34, @random="2be8ee4f3b5872657ff6c8527959fea0395453cae68b7ff9"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_PMK={0x14, 0xfe, "e6212d216dc2d773c47a87145fe9d614"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "81333a1505557218765e62f4917e95c0"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf}, @NL80211_ATTR_SSID={0x18, 0x34, @random="c5e160d03fc8a7001f5ac55cf90ab1bace34a8ee"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 20:22:51 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in, @in6=@private1}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000005c0)=0xe8) clock_gettime(0x5, &(0x7f0000000a40)) 20:22:51 executing program 4: sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xa20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xa5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4401, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x2000) read$ptp(r0, &(0x7f00000003c0)=""/4096, 0x1000) pipe2(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r2) r4 = socket$inet6(0xa, 0x6, 0x8) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000001440)={@mcast2, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0xffffff4c, 0x2, 0x8607, 0x0, 0x5, 0x204}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001500)={0xec, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x8, 0x5}, {0x44, 0x6}, {0xad, 0x1}, {0x7}, {0x80, 0x5}], "5a11d141567e5032"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x3f, 0x2}, {0x1, 0x5}, {0xff, 0x4}, {0x8, 0x2}, {0x8d, 0x1}, {0x3, 0x4}, {0xfb, 0x1}, {0x4, 0x5}, {0x3, 0x5}, {0x8, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x6, 0x4}, {0x6f, 0x4}, {0x0, 0x4}, {0xff, 0x5}, {0x80, 0x2}], "2e552d19b5099120"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "c4406424d2b54ac8"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x1, 0x6}, {0x7, 0x4}, {0x40, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x1f, 0x7}, {0xd3, 0x2}, {0x4, 0x5}, {0x8, 0x4}, {0x40, 0x5}, {0x3, 0x5}], "ba024d429c38b9a2"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x7}, {0x82, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x3}, {0x6, 0x2}, {0xec, 0x7}, {0x1f, 0x5}, {0x1f, 0x3}, {0x65, 0x6}, {0xff, 0x3}, {0x7, 0x5}, {0xff, 0x6}, {0x3}, {0x3}], "329aad0cebd71e74"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x40, 0x4}, {0x2, 0x6}, {0x4d, 0x4}, {0x14, 0x7}, {0x80}, {0x0, 0x6}, {0x8, 0x2}], "8aec918cd7797eef"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x1, 0x4}, {0x1, 0x2}, {0x20, 0x7}, {0xf9, 0x5}, {0x6, 0x6}], "084171094ba236dd"}}]}, 0xec}}, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000001680)=0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x68, r6, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x23}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="53a707db8f6a"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000001980)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, '\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x38, r8, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4a}, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc005) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000001b00)={@loopback, @mcast2, @empty, 0x10001, 0x8001, 0x1, 0x100, 0x40, 0x40000000}) 20:22:51 executing program 2: sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x67}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4010848) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9001021}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x805) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048001}, 0x8004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r0, 0x600, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8804) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x1, 0x530, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc894}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8020200a}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xe0, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x5}, {0x6, 0x3f}, {0xff}, {0x5, 0x6}, {0x5, 0x4}, {0x1, 0x4}, {}, {0x3, 0x2}, {0x7f, 0x7}, {0x3, 0x5}, {0xba, 0x3}, {0x1f}, {0x40, 0x6}, {0x0, 0x3}], "89245b4603bb6bb4"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x6}, {0x9e, 0x5}, {}, {0x80, 0x7}, {0x2}, {0x3, 0x4}, {0x0, 0x7}], "1866eb0f2770d369"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x40, 0x7}, {0xfb, 0x6}, {0x5, 0x6}], "f8162ffd81125f2c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x2}, {0x6, 0x7}, {0x0, 0x2}, {0x5}, {0x1, 0x5}, {0xcc, 0x4}, {0x0, 0x6}], "09f64efcf5425b89"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "140043784e5c343d"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7, 0x6}, {0x2, 0x6}, {0x8, 0x6}, {0xfc, 0x2}, {0x40}, {0x40, 0x3}, {0xe9}, {0x8, 0x4}, {0x1, 0x7}, {0x8, 0x5}, {0x3f, 0x5}, {0x0, 0x6}, {0x31, 0x4}, {0x7}, {0x2, 0x3}, {0x0, 0x5}], "e171737e968aec13"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x3f, 0x4}, {0x0, 0x5}, {0x20, 0x4}, {0x98, 0x6}, {0x0, 0x1}, {0xdd, 0x4}, {0x7, 0x4}, {0x81, 0x5}, {0x3, 0x5}, {0x1, 0x6}], "794210a3a44ba82d"}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40a08510}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x78, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2010}, 0x48000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c00)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008040) 20:22:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @empty, @mcast2}}, 0x34) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x4, 0x1ff, 0x100, 0x8, 0x10}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x14, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0x7, 0xfffffffffffffff8, 0x2, 0x2, 0x1, 0xcd, 0x6, 0xc331a61}, {0x814, 0x40, 0x99c1, 0x10000}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x2, 0x3f, 0xfffff6c3, 0x3f, 0x7ff}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000000340)='./file0\x00', 0x10800, &(0x7f0000000380)={0xc, 0xfb, 0x40000, {r1}}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220080, 0x0) write$cgroup_type(r3, &(0x7f0000000400), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30b) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x2840) openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x8080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) 20:22:51 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x8, 0x7, 0x19, 0x4}, {0x200, 0xef, 0x4, 0xb0800000}, {0xffff, 0xff, 0x81, 0x2}, {0x20, 0x2, 0x8, 0x3}, {0x5, 0x29, 0xb7, 0x1000}, {0x2b, 0x1, 0x56, 0x3}, {0xd0a, 0x2, 0x0, 0x3f}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x380}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "0bf2632d34b918aba93ac61663c1e78a0b31"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7f}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "60f583c88ba67c757509ec1c4d91e8c35e0c76a79ff787c99cd881649334703a5e8fbc6b1be86f471e73e99bd769db1f82b69409a5c6231f6f36e9497be94e9578a1fe24f38f17f07a6f1503ac842299dbd842c85d4ebfa71601929088a1c61c03a4c0dccd7274d5d6a83560e632d8a850d7d548bcc9ab12132a0fcf5afc5659d082ff069e7fdc257046c3cb65599ea97d1bb0"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4fc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xcc1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x40, 0x2}, {0xff, 0x5}, {0x9, 0x1}, {0x7, 0x6}, {0x81, 0x7}, {0xed, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x8}, {0x5a, 0x7}, {0x0, 0x2}], "e55449d06e722e9e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x1}, {0x8, 0x6}, {0x81, 0x1}, {0x1, 0x6}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x7f, 0x5}, {0xde, 0x6}, {0x0, 0x6}, {0x8}, {0x4, 0x4}, {0x6}, {0x7f, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x81, 0x7}, {0x4}, {0x40, 0x5}, {0x1, 0x1}, {}], "a8b08b0eb53555d7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8}, {0x5, 0x1}, {0x1, 0x1}, {0xff, 0x3}, {0x71, 0x4}, {0x8c, 0x3}, {0xc3, 0x7}, {0x0, 0x3}, {0x40}, {0x80, 0x1}, {0xe, 0x3}, {0x40, 0x7}, {0x4d, 0x4}, {0xc0, 0x4}, {0x7, 0x6}, {0xff, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "bb35aa1f19b30152"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x7}, {0x81, 0x4}, {0xf6, 0x2}, {0x1}, {0xfa, 0x4}, {0x3, 0x5}, {0x9, 0x3}, {0x81, 0x1}, {0x7}, {0x9, 0x1}, {0x21, 0x6}, {0x3, 0x7}, {0x9, 0x7}, {0x0, 0x7}, {0x80, 0x1}, {0xd4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x80}, {0x9, 0x6}, {0x7, 0x5}], "9ec7a3488e5ffc2a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8}, {0xb0, 0x4}, {0x69, 0x1}, {0x7, 0x2}, {0x40}, {0x40, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x2d, 0x3}, {0x32, 0x4}, {0xff, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0xff, 0x3}, {0x4}, {0x2, 0x4}, {0x6, 0x1}], "36db8d4379d69bb5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x80}, {0x34, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x7c, 0x3}, {0x2, 0x1}, {0x20, 0x7}, {0x40, 0x6}, {0x8}, {0x40, 0x4}, {0x3, 0x7}, {0x9, 0x7}, {0x40, 0x7}, {0x8, 0x6}, {0x78, 0x1}, {0x40, 0x1}, {0xa7, 0x2}, {0xa2, 0x5}, {0x0, 0x7}], "a5cbb62441f4bc53"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x7}, {0x4, 0x3}, {0x9, 0x4}, {0x7f}], "d595a3fb05c66711"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x8, 0x7}, {0x2, 0x7}], "ddeaa8c24e2b1a30"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x4}, {0x4, 0x1}, {0x8, 0x4}, {0x80, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x9, 0x4}, {0x3, 0x6}], "3bb6edadc9e39020"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000042}, 0x4c040) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000d40)={0x0, 0x10001, 0x1000}) 20:22:51 executing program 0: waitid(0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) wait4(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfe39}}, './file0\x00'}) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x410300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000480)='\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r5 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000580)={0x0, "b1e184"}, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) 20:22:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x1000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x800, 0x7e8}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000480)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000000640)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000680)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000700)) 20:22:51 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0xd5f73b6dbb1389db, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x48004) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd25, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x308, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1eb026b6c04c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3753af5888b92a7174e9f079e9cdde7c6f2e1174aaf86d575c20123c81aa09adfb4c5c3619f01c68bf0f3cceb322a095684118bb162085ce5b89d48069506925e8977c3bf802b65f66f6d229e24faa2972da4884bbd4139042c811a6dbc343f0dc63e8e228ae96f3650cc821cd9376538030681b4e04134862671b4415d303ec60779ec6352360f8f065c5e3316abca859c272fedaac0efec86416d4baecfa73926bd2e99a1ae311b0926ee8e2e06867b8df1488f36f4428b8eaea547bdc6b45997b4897fbad175db16822092f11b752bf3b0fa671724a8e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fffc0, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36b2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8f4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "a145ae8c9c0ce15f7a62ad2982e71bda8f70376e3bf9897aaa049b813cbef617a4c19ddd7c9c842f0eeb99c7d7661af8a5043dd9ed124e3bb375558ba81b543d6f4304b2a8ef8fd082046da17596958e2c1bfe20d1f18ba3287ad07922bd933ba37aea36165f852754b240a96307bd6dbaee7eda6876b720c55137d12f0bc31b72b5179d5d1da7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xb8}}, 0x84) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) 20:22:51 executing program 0: waitid(0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) wait4(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfe39}}, './file0\x00'}) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x410300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000480)='\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r5 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000580)={0x0, "b1e184"}, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 20:22:51 executing program 7: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x8, 0x7, 0x19, 0x4}, {0x200, 0xef, 0x4, 0xb0800000}, {0xffff, 0xff, 0x81, 0x2}, {0x20, 0x2, 0x8, 0x3}, {0x5, 0x29, 0xb7, 0x1000}, {0x2b, 0x1, 0x56, 0x3}, {0xd0a, 0x2, 0x0, 0x3f}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x380}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3d}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x16, 0xac, "0bf2632d34b918aba93ac61663c1e78a0b31"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x7f}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x97, 0xac, "60f583c88ba67c757509ec1c4d91e8c35e0c76a79ff787c99cd881649334703a5e8fbc6b1be86f471e73e99bd769db1f82b69409a5c6231f6f36e9497be94e9578a1fe24f38f17f07a6f1503ac842299dbd842c85d4ebfa71601929088a1c61c03a4c0dccd7274d5d6a83560e632d8a850d7d548bcc9ab12132a0fcf5afc5659d082ff069e7fdc257046c3cb65599ea97d1bb0"}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xe8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0xfffffffb}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xb4, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x4}}}}, [@NL80211_ATTR_TID_CONFIG={0x8c, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4fc}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000048}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0xcc1}}, './file0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x18, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) sendmsg$NL80211_CMD_SET_QOS_MAP(r8, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x198, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0xa}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x40, 0x2}, {0xff, 0x5}, {0x9, 0x1}, {0x7, 0x6}, {0x81, 0x7}, {0xed, 0x4}, {0x0, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x8}, {0x5a, 0x7}, {0x0, 0x2}], "e55449d06e722e9e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x1}, {0x8, 0x6}, {0x81, 0x1}, {0x1, 0x6}, {0x9, 0x2}, {0x4}, {0x1, 0x3}, {0x7f, 0x5}, {0xde, 0x6}, {0x0, 0x6}, {0x8}, {0x4, 0x4}, {0x6}, {0x7f, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x81, 0x7}, {0x4}, {0x40, 0x5}, {0x1, 0x1}, {}], "a8b08b0eb53555d7"}}, @NL80211_ATTR_QOS_MAP={0x30, 0xc7, {[{0x8}, {0x5, 0x1}, {0x1, 0x1}, {0xff, 0x3}, {0x71, 0x4}, {0x8c, 0x3}, {0xc3, 0x7}, {0x0, 0x3}, {0x40}, {0x80, 0x1}, {0xe, 0x3}, {0x40, 0x7}, {0x4d, 0x4}, {0xc0, 0x4}, {0x7, 0x6}, {0xff, 0x4}, {0x3, 0x3}, {0x3, 0x1}], "bb35aa1f19b30152"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x7, 0x7}, {0x81, 0x4}, {0xf6, 0x2}, {0x1}, {0xfa, 0x4}, {0x3, 0x5}, {0x9, 0x3}, {0x81, 0x1}, {0x7}, {0x9, 0x1}, {0x21, 0x6}, {0x3, 0x7}, {0x9, 0x7}, {0x0, 0x7}, {0x80, 0x1}, {0xd4, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x80}, {0x9, 0x6}, {0x7, 0x5}], "9ec7a3488e5ffc2a"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x8}, {0xb0, 0x4}, {0x69, 0x1}, {0x7, 0x2}, {0x40}, {0x40, 0x6}, {0x2, 0x4}, {0x1, 0x4}, {0x2d, 0x3}, {0x32, 0x4}, {0xff, 0x7}, {0x5, 0x5}, {0x8, 0x1}, {0xff, 0x3}, {0x4}, {0x2, 0x4}, {0x6, 0x1}], "36db8d4379d69bb5"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x80}, {0x34, 0x3}, {0x1, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x7c, 0x3}, {0x2, 0x1}, {0x20, 0x7}, {0x40, 0x6}, {0x8}, {0x40, 0x4}, {0x3, 0x7}, {0x9, 0x7}, {0x40, 0x7}, {0x8, 0x6}, {0x78, 0x1}, {0x40, 0x1}, {0xa7, 0x2}, {0xa2, 0x5}, {0x0, 0x7}], "a5cbb62441f4bc53"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x3, 0x7}, {0x4, 0x3}, {0x9, 0x4}, {0x7f}], "d595a3fb05c66711"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x4}, {0x40, 0x7}, {0x2, 0x3}, {0x8, 0x7}, {0x2, 0x7}], "ddeaa8c24e2b1a30"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x4}, {0x4, 0x1}, {0x8, 0x4}, {0x80, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x3, 0x4}, {0x9, 0x4}, {0x3, 0x6}], "3bb6edadc9e39020"}}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000042}, 0x4c040) 20:22:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x1000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x800, 0x7e8}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000480)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000000640)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000680)) 20:22:51 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r1 = syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000480)={'vcan0', 0x32, 0x33}, 0x8) clock_gettime(0x5, &(0x7f0000000a40)) 20:22:51 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) write$tun(r0, &(0x7f0000000040)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @empty, @loopback, @empty, @mcast2}}, 0x34) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x4, 0x1ff, 0x100, 0x8, 0x10}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x14, 0x4e23, 0x5, 0x2, 0x80, 0x80, 0x2b, 0x0, 0xee01}, {0x7, 0xfffffffffffffff8, 0x2, 0x2, 0x1, 0xcd, 0x6, 0xc331a61}, {0x814, 0x40, 0x99c1, 0x10000}, 0x3, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d4, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3502, 0x4, 0x2, 0x3f, 0xfffff6c3, 0x3f, 0x7ff}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mount_setattr(r2, &(0x7f0000000340)='./file0\x00', 0x10800, &(0x7f0000000380)={0xc, 0xfb, 0x40000, {r1}}, 0x20) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x220080, 0x0) write$cgroup_type(r3, &(0x7f0000000400), 0x9) syz_extract_tcp_res$synack(&(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {r5}}, './file0\x00'}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x30b) syz_open_dev$mouse(&(0x7f0000000500), 0x7, 0x2840) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, r7, {0x6}}, './file0\x00'}) 20:22:51 executing program 0: waitid(0x1, 0x0, &(0x7f0000000000), 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1000000, &(0x7f0000000100)) wait4(0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xfe39}}, './file0\x00'}) wait4(0x0, 0x0, 0x80000000, &(0x7f0000000340)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x410300, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = memfd_create(&(0x7f0000000480)='\x00', 0x3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r5 = accept4$bt_l2cap(r0, &(0x7f0000000500)={0x1f, 0x0, @none}, &(0x7f0000000540)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000580)={0x0, "b1e184"}, 0x6) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x181000, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x6000) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000700)) 20:22:51 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0xd5f73b6dbb1389db, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x7f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x24044800) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x4c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c4}, 0x48004) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd25, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040850}, 0x40000) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r0, 0x308, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="1eb026b6c04c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c001}, 0x80) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x13c, r4, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xe4, 0x3, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xdc, 0x2, "3753af5888b92a7174e9f079e9cdde7c6f2e1174aaf86d575c20123c81aa09adfb4c5c3619f01c68bf0f3cceb322a095684118bb162085ce5b89d48069506925e8977c3bf802b65f66f6d229e24faa2972da4884bbd4139042c811a6dbc343f0dc63e8e228ae96f3650cc821cd9376538030681b4e04134862671b4415d303ec60779ec6352360f8f065c5e3316abca859c272fedaac0efec86416d4baecfa73926bd2e99a1ae311b0926ee8e2e06867b8df1488f36f4428b8eaea547bdc6b45997b4897fbad175db16822092f11b752bf3b0fa671724a8e"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7f}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8801}, 0x4084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3fffc0, 0x70}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x36b2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8f4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4004081) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x80200, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb8, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x8b, 0xc5, "a145ae8c9c0ce15f7a62ad2982e71bda8f70376e3bf9897aaa049b813cbef617a4c19ddd7c9c842f0eeb99c7d7661af8a5043dd9ed124e3bb375558ba81b543d6f4304b2a8ef8fd082046da17596958e2c1bfe20d1f18ba3287ad07922bd933ba37aea36165f852754b240a96307bd6dbaee7eda6876b720c55137d12f0bc31b72b5179d5d1da7"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}]}, 0xb8}}, 0x84) openat$autofs(0xffffffffffffff9c, &(0x7f0000000c40), 0x900, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x200000, 0x0) 20:22:51 executing program 6: bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x101, @mcast2, 0x7fff}, 0x1c) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=@hopopts={0xbc, 0x6, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x401, [0x2]}}, @hao={0xc9, 0x10, @remote}]}, 0x38) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff, 0x7, 0x2, 0x400, 0x6, 0x820002, r0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x3, 0x0, 0x4, 0x1}, &(0x7f00000002c0)=0x20) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$mouse(&(0x7f0000000440), 0x2400000000, 0x102) clock_gettime(0x5, &(0x7f0000000a40)) 20:22:51 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x1000) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000080)) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r0}}, './file0\x00'}) waitid$P_PIDFD(0x3, r4, &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={0x0, 0x800, 0x7e8}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000480)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20040880) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1, r2}}, './file0\x00'}) ioctl$SCSI_IOCTL_SYNC(r7, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r8, 0x2288, &(0x7f0000000640)) VM DIAGNOSIS: 20:22:49 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888036301ac0 RSI=ffffffff812c6586 RDI=0000000000000001 RBP=ffff8880175ffb00 RSP=ffff8880175ffac8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000002a R13=ffff888008901ac0 R14=0000000000000200 R15=ffff8880175ffb50 RIP=ffffffff812c6588 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000556266166648 CR3=0000000008954000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 000c016c6c6f502e 726567616e614d0c YMM02=0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 992284ac03156f7a f0178ff324fea178 YMM05=0000000000000000 0000000000000000 1cc6a18890920116 a7bf4e5dc842d8db YMM06=0000000000000000 0000000000000000 a8d832e66035a8d6 d57472cddcc0a403 YMM07=0000000000000000 0000000000000000 5956fc5acf0f2a13 12abc9bc48d5d750 YMM08=0000000000000000 0000000000000000 bc8f5e3a70349364 81d89cc987f79fa7 YMM09=0000000000000000 0000000000000000 94b6821fdb69d79b e9731e476fe81b6b YMM10=0000000000000000 0000000000000000 fea178954ee97b49 e9366f1f23c6a509 YMM11=0000000000000000 0000000000000000 42d8db992284ac03 156f7af0178ff324 YMM12=0000000000000000 0000000000000000 c0a4031cc6a18890 920116a7bf4e5dc8 YMM13=0000000000000000 0000000000000000 d5d750a8d832e660 35a8d6d57472cddc YMM14=0000000000000000 0000000000000000 ff82d05956fc5acf 0f2a1312abc9bc48 YMM15=0000000000000000 0000000000000000 b01b7da99e5965cb c3467025dc7f9e06 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888008901ac0 RSI=ffffffff812c6586 RDI=0000000000000001 RBP=ffff88800902fc30 RSP=ffff88800902fbf8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000018 R13=ffff888036301ac0 R14=0000000000000200 R15=ffff88800902fc80 RIP=ffffffff812c6588 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe49273080 CR3=000000000d184000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000