f50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:17:20 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "c268e926d18fc15b815000e34cfe44ec"}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:20 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x1}) syz_open_dev$loop(&(0x7f0000000400), 0x3f, 0x400841) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000680)={r1, 0x3, 0x10001}) 00:17:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r7, 0x2f, 0x6, 0x97, 0xff, 0x28, @mcast2, @mcast1, 0x20, 0x0, 0x1, 0x3f}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r8, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{r1, 0x8, 0x3, 0x6, 0x7f, 0x6, 0x9, 0x8, 0x1ff, 0x8000, 0x1, 0x10000, 0x5c, 0x400000000000, 0x7fffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:20 executing program 6: sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5e}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000888}, 0x20000890) write$cgroup_int(0xffffffffffffffff, &(0x7f0000005e80)=0x4bc, 0x12) 00:17:20 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8810) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001500)=0x92, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001540)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001580)={{r1}, r4, 0x2, @unused=[0x5, 0xb10, 0x0, 0x684], @devid}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) [ 182.208444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.229522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:17:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{r1, 0x8, 0x3, 0x6, 0x7f, 0x6, 0x9, 0x8, 0x1ff, 0x8000, 0x1, 0x10000, 0x5c, 0x400000000000, 0x7fffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:20 executing program 6: write$cgroup_int(0xffffffffffffffff, &(0x7f0000005e80)=0x4bc, 0x12) 00:17:20 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "c268e926d18fc15b815000e34cfe44ec"}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:20 executing program 0: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x1}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000680)={r1, 0x3, 0x10001}) 00:17:20 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8810) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001500)=0x92, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000001540)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:20 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000000)={0x0, "c268e926d18fc15b815000e34cfe44ec"}) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:20 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{r1, 0x8, 0x3, 0x6, 0x7f, 0x6, 0x9, 0x8, 0x1ff, 0x8000, 0x1, 0x10000, 0x5c, 0x400000000000, 0x7fffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:20 executing program 6: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 187.739110] Bluetooth: hci6: command 0x0406 tx timeout [ 187.740467] Bluetooth: hci5: command 0x0406 tx timeout [ 187.748651] Bluetooth: hci2: command 0x0406 tx timeout [ 187.749711] Bluetooth: hci7: command 0x0406 tx timeout [ 187.750761] Bluetooth: hci1: command 0x0406 tx timeout [ 187.751775] Bluetooth: hci0: command 0x0406 tx timeout [ 187.756238] Bluetooth: hci4: command 0x0406 tx timeout [ 187.760205] Bluetooth: hci3: command 0x0406 tx timeout 00:17:28 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:17:28 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8810) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001500)=0x92, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:28 executing program 1: ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:28 executing program 0: syz_open_dev$char_usb(0xc, 0xb4, 0x3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x3, 0x10001}) 00:17:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000280)={{r1, 0x8, 0x3, 0x6, 0x7f, 0x6, 0x9, 0x8, 0x1ff, 0x8000, 0x1, 0x10000, 0x5c, 0x400000000000, 0x7fffffff}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:28 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r7, 0x2f, 0x6, 0x97, 0xff, 0x28, @mcast2, @mcast1, 0x20, 0x0, 0x1, 0x3f}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r8, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:28 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) [ 190.676175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.687518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:17:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x3, 0x10001}) 00:17:28 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8810) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000001500)=0x92, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:28 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:28 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:28 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r7, 0x2f, 0x6, 0x97, 0xff, 0x28, @mcast2, @mcast1, 0x20, 0x0, 0x1, 0x3f}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r8, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:37 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={0x0, 0x3, 0x10001}) 00:17:37 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:17:37 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8810) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:37 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:37 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:37 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 199.541658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.550594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:17:37 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:37 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:37 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={0x0, 0x3, 0x10001}) 00:17:37 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001400)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:37 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) 00:17:37 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001380)={&(0x7f00000011c0), 0xc, &(0x7f0000001340)={&(0x7f0000001240)={0xec, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x76}}}}, [@NL80211_ATTR_CSA_IES={0x18, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x3, 0x81, 0x0, 0x80, 0x4, 0x401, 0x401]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb1}, @NL80211_ATTR_CSA_IES={0x1c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x3, 0x400]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x100, 0x7, 0xfff9, 0x7, 0x7f, 0x3]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x66}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb0}]}, 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:37 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:37 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:46 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000680)={0x0, 0x3, 0x10001}) 00:17:46 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:46 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:46 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) 00:17:46 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x408c001}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x4c, 0x0, 0x1, 0x1, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2ca700}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) 00:17:46 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:46 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r7}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:46 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:17:46 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) [ 208.193459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.198452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:17:46 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:46 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000001c0)={{r1}, 0x0, 0x6, @inherit={0x60, &(0x7f0000000140)={0x0, 0x3, 0xfffffffffffff694, 0x4ff5, {0x0, 0xff, 0x8, 0x9, 0x81}, [0xcc, 0x6, 0x0]}}, @devid}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 00:17:46 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0xc010) 00:17:46 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r7}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:46 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x53}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xaf65de402c60e4b7}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:55 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) 00:17:55 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000065c0)={0x0, 0x7ff, 0x30b, 0x1}) 00:17:55 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:17:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:55 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:17:55 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) 00:17:55 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r7}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:55 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:55 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000006580), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, 0x0) 00:17:55 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, 0x0, 0x0) [ 217.450247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.460731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.465169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.482255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:17:55 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:17:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:17:55 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:17:55 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) 00:17:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:04 executing program 1: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:04 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) 00:18:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:04 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:04 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:04 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) [ 226.606500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.624378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.639248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.659770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:04 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:04 executing program 1: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:04 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r4 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r4, 0x7fffffff, 0x80000}) 00:18:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:18:04 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:18:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:13 executing program 1: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:13 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:13 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:13 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) 00:18:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:18:13 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r3 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) [ 235.167118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.174055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.188574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.189432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) 00:18:13 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r3 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 00:18:13 executing program 1: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00'}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) 00:18:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:13 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:13 executing program 1: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:22 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r3 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) 00:18:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:22 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:22 executing program 1: socketpair(0x29, 0x3, 0x0, &(0x7f0000000000)) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:22 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:22 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ptrace$peek(0x2, r0, &(0x7f0000000600)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) [ 244.150799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.170771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.175208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.195903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:22 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:22 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:31 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ptrace$peek(0x2, r0, &(0x7f0000000600)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:31 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:31 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:31 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) [ 253.357249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.366246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.366522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.367846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r7, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:31 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:31 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:31 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:39 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:39 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ptrace$peek(0x2, r0, &(0x7f0000000600)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:39 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:39 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:39 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 261.651473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.661277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) [ 261.691874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.701272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 261.758346] Zero length message leads to an empty skb 00:18:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:18:47 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:47 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:47 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:18:47 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:47 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) [ 269.509682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.516368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.516821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.540261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:47 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:47 executing program 6: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:56 executing program 6: socket(0x0, 0xa, 0xbafa) accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:56 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:56 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:18:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:56 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r6, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) [ 278.628424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.635684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.640082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.641610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:18:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8080) 00:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:56 executing program 6: accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) 00:18:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:56 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r6, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:18:56 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:18:56 executing program 6: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000700), 0x80800) 00:18:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:19:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100), 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:04 executing program 6: accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) 00:19:04 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, 0xffffffffffffffff, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r6, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r8}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:04 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) ptrace$peek(0x2, r0, &(0x7f0000000600)) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:04 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r2) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) [ 286.562142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.565105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) [ 286.636708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.640695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:04 executing program 2: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:04 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) r1 = accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r1, 0x7fffffff, 0x80000}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r3, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r5}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:04 executing program 6: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:19:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:04 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:13 executing program 2: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:13 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:13 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) ptrace$peek(0x2, r0, &(0x7f0000000600)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:13 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:13 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) r1 = accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r1, 0x7fffffff, 0x80000}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r3, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r5}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 295.455534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.462364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:13 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 295.492502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:19:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 295.505956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:13 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:13 executing program 2: sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:21 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:21 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:21 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) r1 = accept4(0xffffffffffffffff, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r1, 0x7fffffff, 0x80000}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r3, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r5}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 303.758610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.777554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.797803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.806767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:21 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:21 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:30 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:30 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:30 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:19:30 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:30 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r1, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r5) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r6, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:31 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:31 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 313.038385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.044982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.074247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.075946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:19:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:19:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:31 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:31 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:31 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:19:31 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:19:40 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:40 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:40 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:40 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:40 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:40 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 322.214065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.221538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.222844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.224529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:40 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:40 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, 0x0, 0x8080) 00:19:40 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:40 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r5, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:40 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:48 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:48 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:48 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:48 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:48 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:48 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) [ 330.886529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.894709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.912138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.915415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8080) 00:19:49 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:49 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:19:49 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:19:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:19:58 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:58 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:58 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:58 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:19:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:19:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:58 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:58 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 340.223370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.232560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.254230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.256712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:19:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:58 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:19:58 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:58 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:19:58 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:19:58 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:07 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:07 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:07 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:07 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:07 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:07 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x0, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) [ 349.259606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.273974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.283391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.296265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x34, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:20:07 executing program 4: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:07 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) 00:20:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:07 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:20:07 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) 00:20:07 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:20:16 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:16 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:16 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:16 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:20:16 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:16 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) 00:20:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:20:16 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) [ 358.131841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.145998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.150363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.157871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8080) 00:20:16 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:16 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:24 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:24 executing program 3: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:24 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:24 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:24 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:24 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 366.560556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.572414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.575036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.575912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:24 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 00:20:24 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:24 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:24 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:24 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:24 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:33 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:33 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:33 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:33 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:33 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:33 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:33 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', r0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r4, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:33 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 375.892766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.903553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.907474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.918573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:34 executing program 6: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:34 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:34 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:34 executing program 5: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:34 executing program 6: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:34 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:34 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:42 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:42 executing program 6: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:42 executing program 5: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) 00:20:42 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) 00:20:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:42 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:42 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) [ 384.585917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.588900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.589765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.590391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:42 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) syz_open_dev$loop(&(0x7f00000001c0), 0xfffffffffffffffb, 0x64400) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) 00:20:42 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) 00:20:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:42 executing program 6: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:42 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:42 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) 00:20:42 executing program 5: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r0, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r5 = accept4(r2, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r5, 0x7fffffff, 0x80000}) recvmsg$unix(r1, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r7, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r9}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:51 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:51 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:51 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) 00:20:51 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) 00:20:51 executing program 5: r0 = socket(0x0, 0x0, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:51 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:51 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:20:51 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) [ 393.954748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.961435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.962316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.963560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:20:52 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x17, 0x6, 0x80000001, 0x19, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7800, 0x7, 0x10001, 0x8}}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:52 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:20:52 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:52 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:20:52 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) socket$inet_udp(0x2, 0x2, 0x0) 00:20:52 executing program 5: r0 = socket(0x0, 0x0, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:20:52 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:01 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:01 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:01 executing program 5: r0 = socket(0x0, 0x0, 0xbafa) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:21:01 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:01 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:01 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:01 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:01 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x10000, 0x4, 0x1}) [ 403.038308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.044751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.056715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:21:01 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) [ 403.073517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:21:01 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x124, 0x0, 0x114, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0xfff, 0x57}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3d05c2de816ba5d7e0c0640ac5b330af35f90361f82df11e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "991ed4ad84862a2d205267f45c454d500f1eb11451e803c1"}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_0\x00'}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040000}, 0x880) 00:21:01 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r2, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:01 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:01 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:01 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x9, 0x6, 0x15, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x80, 0x8, 0x9}}) 00:21:01 executing program 5: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:21:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:10 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:10 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:10 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:10 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) 00:21:10 executing program 5: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:21:10 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:10 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) getrusage(0x0, &(0x7f0000000380)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) [ 412.299528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.300514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.302036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.302951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:21:10 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:10 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:10 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:10 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:10 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:18 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:18 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:18 executing program 1: syz_open_dev$loop(0x0, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:18 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:18 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:18 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:18 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:18 executing program 5: r0 = socket(0x0, 0xa, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) [ 420.216643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.223245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.225357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.228277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:21:18 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 00:21:18 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) [ 420.316479] [ 420.316650] ===================================== [ 420.317042] WARNING: bad unlock balance detected! [ 420.317423] 6.19.0-rc5-next-20260116 #1 Not tainted [ 420.317824] ------------------------------------- [ 420.318195] syz-executor.6/5842 is trying to release lock (rcu_read_lock) at: [ 420.318756] [] __wait_on_freeing_inode+0x105/0x350 [ 420.319267] but there are no more locks to release! [ 420.319654] [ 420.319654] other info that might help us debug this: [ 420.320156] 4 locks held by syz-executor.6/5842: [ 420.320521] #0: ffff88800f77a3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 420.321222] #1: ffff88801be0bd10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 420.322003] #2: ffff88800f77e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 420.322707] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 420.323422] [ 420.323422] stack backtrace: [ 420.323771] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 420.323785] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 420.323792] Call Trace: [ 420.323796] [ 420.323801] dump_stack_lvl+0xca/0x120 [ 420.323830] ? __wait_on_freeing_inode+0x105/0x350 [ 420.323844] print_unlock_imbalance_bug+0x118/0x130 [ 420.323860] ? __wait_on_freeing_inode+0x105/0x350 [ 420.323874] lock_release+0x1ee/0x270 [ 420.323889] __wait_on_freeing_inode+0x10a/0x350 [ 420.323903] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 420.323919] ? __pfx_var_wake_function+0x10/0x10 [ 420.323936] ? lock_is_held_type+0x9e/0x120 [ 420.323948] insert_inode_locked+0x25f/0x890 [ 420.323965] __ext4_new_inode+0x223d/0x4cd0 [ 420.323982] ? __pfx___ext4_new_inode+0x10/0x10 [ 420.323996] ? __pfx___dquot_initialize+0x10/0x10 [ 420.324014] ? __pfx_avc_has_perm+0x10/0x10 [ 420.324030] ext4_symlink+0x623/0xb40 [ 420.324049] ? __pfx_ext4_symlink+0x10/0x10 [ 420.324065] ? security_inode_permission+0x72/0xe0 [ 420.324078] vfs_symlink+0x44b/0x840 [ 420.324094] filename_symlinkat+0x158/0x440 [ 420.324108] ? __pfx_filename_symlinkat+0x10/0x10 [ 420.324121] ? strncpy_from_user+0x21b/0x2f0 [ 420.324138] __x64_sys_symlink+0x82/0x110 [ 420.324151] do_syscall_64+0xbf/0x420 [ 420.324165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.324177] RIP: 0033:0x7f9f25ab5427 [ 420.324186] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.324197] RSP: 002b:00007ffdcc2c5e48 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 420.324207] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9f25ab5427 [ 420.324215] RDX: ffffffffffffffbc RSI: 00007f9f25b1000e RDI: 00007f9f25b0f1dd [ 420.324222] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdcc2c58c0 [ 420.324229] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 420.324236] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdcc2c5f10 [ 420.324247] [ 420.344736] ------------[ cut here ]------------ [ 420.345164] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.6/5842 [ 420.346049] Modules linked in: [ 420.346341] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 420.347161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 420.347800] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 420.348302] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 420.349771] RSP: 0018:ffff8880184df9a0 EFLAGS: 00010286 [ 420.350231] RAX: 00000000ffffffff RBX: ffff88801b7e5280 RCX: ffffffff815660f7 [ 420.350783] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801b7e567c [ 420.351378] RBP: ffff88801b7e5280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 420.351935] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b7e5280 [ 420.352537] R13: 0000000000000001 R14: ffffffff85c0d560 R15: ffff88801be058e0 [ 420.353138] FS: 000055556e197400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 420.353763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.354266] CR2: 00007fd088819368 CR3: 000000000c457000 CR4: 0000000000350ef0 [ 420.354822] Call Trace: [ 420.355100] [ 420.355738] __wait_on_freeing_inode+0x10f/0x350 [ 420.356437] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 420.357508] ? __pfx_var_wake_function+0x10/0x10 [ 420.358726] ? lock_is_held_type+0x9e/0x120 [ 420.359809] insert_inode_locked+0x25f/0x890 [ 420.361428] __ext4_new_inode+0x223d/0x4cd0 [ 420.363857] ? __pfx___ext4_new_inode+0x10/0x10 [ 420.365106] ? __pfx___dquot_initialize+0x10/0x10 [ 420.365832] ? __pfx_avc_has_perm+0x10/0x10 [ 420.367586] ext4_symlink+0x623/0xb40 [ 420.369799] ? __pfx_ext4_symlink+0x10/0x10 [ 420.370795] ? security_inode_permission+0x72/0xe0 [ 420.372419] vfs_symlink+0x44b/0x840 [ 420.373686] filename_symlinkat+0x158/0x440 [ 420.374805] ? __pfx_filename_symlinkat+0x10/0x10 [ 420.375569] ? strncpy_from_user+0x21b/0x2f0 [ 420.377474] __x64_sys_symlink+0x82/0x110 [ 420.378213] do_syscall_64+0xbf/0x420 [ 420.378969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.379514] RIP: 0033:0x7f9f25ab5427 [ 420.379872] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.381339] RSP: 002b:00007ffdcc2c5e48 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 420.381928] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9f25ab5427 [ 420.382529] RDX: ffffffffffffffbc RSI: 00007f9f25b1000e RDI: 00007f9f25b0f1dd [ 420.383138] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffdcc2c58c0 [ 420.383699] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 420.384295] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffdcc2c5f10 [ 420.386855] [ 420.387090] irq event stamp: 641 [ 420.387355] hardirqs last enabled at (641): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 420.388189] hardirqs last disabled at (640): [] _raw_spin_lock_irqsave+0x53/0x60 [ 420.388953] softirqs last enabled at (636): [] kernel_fpu_end+0x59/0x70 [ 420.389721] softirqs last disabled at (634): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 420.390529] ---[ end trace 0000000000000000 ]--- 00:21:18 executing program 1: syz_open_dev$loop(0x0, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:18 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:18 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:21:18 executing program 1: syz_open_dev$loop(0x0, 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:18 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:21:18 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 00:21:26 executing program 6: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) 00:21:26 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:26 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000a80)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x4}}, @hci={0x1f, 0x4, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x200000}, 0x8001, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a40)='wg0\x00', 0x1, 0x6, 0x2}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x6, 0x8, {{0x13, 0x4, 0x0, 0x5, 0x4c, 0x67, 0x0, 0x9, 0x29, 0x0, @multicast2, @remote, {[@ra={0x94, 0x4, 0x1}, @noop, @rr={0x7, 0xb, 0x3d, [@local, @remote]}, @noop, @timestamp_addr={0x44, 0x24, 0x2c, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7ff}, {@multicast2, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x4}, {@private=0xa010102}]}]}}}}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:26 executing program 7: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) getrusage(0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000640)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000780), 0x4002) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:26 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 00:21:26 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @generic={0x2a, "f470b337dab45108eb9d722a41d8"}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0x2}}, @nl=@unspec, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='veth1_to_hsr\x00', 0x1, 0x9, 0x4}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) wait4(r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000180)) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [@NL80211_ATTR_CSA_IES={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r2, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x201, 0x0) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000700)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x100}, @generic={0x1, "d20f866083e7c0e29d351222172f"}, @llc={0x1a, 0x304, 0x20, 0x5, 0x7f, 0x7, @random="b552ae63be97"}, 0x4, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)='netpci0\x00', 0x2, 0x6, 0x400}) syz_usb_connect$cdc_ecm(0x5, 0x1ca, &(0x7f0000000940)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b8, 0x1, 0x1, 0x80, 0xa0, 0x89, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, "83"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x80, 0xb5a, 0x1f}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x2, 0x9}, @mdlm_detail={0x8c, 0x24, 0x13, 0x1f, "999a82ee72ef83321c7da8da78c32e188bad96f0cd4964d0464840928bfd9227c514fad74617c7b6b5ab59850aa19e3161518fc8c52a52d1992da0368fdd51a64ceb27c633c4c85dac3dca408250fc09c8f2d2029ce8bc0679bd68145691718cb65fc70eff53f43020d311a8cca7396793ba1f1663944a299cfec13650ddc7427fe8bee2a95353dc"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x7, "a077475e5e013490e37af12a09ead46bf00544575d14258f0c7447a5daa5f64ed776a35efffcd0bb1fc76ac458a75539cab5565bb0e113ff4e2a9c9ff50518eed5ea0bbc328ff9b8b6e5ef63b6ce1ea3147d3f6ad85f504cf5065442d730eda3ccd0865c43145cf5bed6d6e5705f6dc743e92231b4ffe85115cdac10be60805f84093ca41330cf4d13075d23d5c008c806d60d30c47181f633ee257e68efc599bfd232ec2e5f5c06d9637e0a6efbcf77ac4e843ea5d43ffff1d2c29e578799077a8b3c6b895e060101dc5cdbfbf3a6acf463d2c3a64ebbcc8dd941"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xf9, 0x1, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x1, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xc1}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x6, 0x2, 0x0, 0x20, 0x7}, 0xc, &(0x7f0000000b80)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x1, 0x3}]}, 0x2, [{0x58, &(0x7f0000000bc0)=@string={0x58, 0x3, "9dccc7df17701da2f1b1b9907868b4c548392da3ab31e15cec26d641ab82011cbfac134e2653c4cc75b01d627d3c6b011c1795dd0a98b1b3a419338ad5959679279355b348082443fbda1870170fc14a4cf9388182d4"}}, {0x3c, &(0x7f0000000c40)=@string={0x3c, 0x3, "280cdcbb923d4e1e1dd202a03d7837cdbe4d25bc0733a1fd79ae5a0d90227eaab6d49f290c315a8a549f0d0b1f0214cd6ccd4d6760f4bc98b1bd"}}]}) 00:21:26 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 00:21:26 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) [ 428.101873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.108198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.125367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:21:26 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) [ 428.142524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:21:26 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:26 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:26 executing program 4: syz_open_dev$loop(0x0, 0x7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x880) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000009c0)) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r1, 0x212, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x63cf, 0x15}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8040) 00:21:26 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:26 executing program 6: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r0) 00:21:26 executing program 1: syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) 00:21:26 executing program 5: r0 = socket(0x0, 0xa, 0xbafa) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={0x0, @phonet={0x23, 0x4, 0x2, 0x1}, @qipcrtr={0x2a, 0x4, 0x2}, @llc={0x1a, 0x101, 0x1, 0x0, 0xa6, 0x4, @broadcast}, 0x101, 0x0, 0x0, 0x0, 0xe8e, &(0x7f0000000000)='veth0_macvtap\x00', 0x3, 0x80000001, 0x6}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"c331d79c3599228d4b92d68861dcab57", 0x0, 0x0, {0x5e9}, {0x2, 0x2}, 0x7ff, [0x4, 0x3, 0x101, 0x4, 0x6e, 0x98f, 0xfffffffe0000, 0xbf5, 0x10000, 0x0, 0x14, 0x0, 0x2, 0x7, 0x8, 0x3]}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)) recvmsg$unix(r0, &(0x7f0000000340)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) recvmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000400)=""/241, 0xf1}], 0x1, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x12002) r6 = accept4(r3, &(0x7f0000000680)=@in={0x2, 0x0, @loopback}, &(0x7f0000000700)=0x80, 0x80800) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x110, 0x15, 0x100, 0x70bd26, 0x25dfdbff, {0x15}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "8d89444e2b5f34826f274c5401fb24714165d93753d3cb3a3220752aee2a4a27fba67833bc0edac5cab5771a9573cc68325728f2d2891c467478e9c2f7838e4231e100afb270b867552e5114c6d079dbd107dc90133837202a671c376190e6f068dcf1b40d2f5ef6f99a2889d0c86166e99a8e29a0f1eb7e64307c52a9a3f6547d351880c8f0771f4ce37894c6578b2870eedaa46512199a8787e3adfda4e9bf734e280c1e3ce75f819b1479cd79fd7ab7fe706c33ae70ecf3520face92cedb960e1948831a8b5d957fa39144e9194de2756cedc09c4bc7b87b3ff9c9b14c6a031216e7a9411c2f91ce8457c059068524257dbce547e6c8b"}]}, 0x110}, 0x1, 0x0, 0x0, 0x20851}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3f}]}, 0x1c}}, 0x4000005) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, r6, 0x7fffffff, 0x80000}) recvmsg$unix(r2, &(0x7f00000020c0)={&(0x7f0000000a80), 0x6e, &(0x7f0000001f80)=[{&(0x7f0000000b00)=""/199, 0xc7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000c80)=""/228, 0xe4}, {&(0x7f0000000d80)=""/78, 0x4e}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/250, 0xfa}, {&(0x7f0000001f40)=""/8, 0x8}], 0x8, &(0x7f0000002000)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x20010000) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002100)={{0x0, 0x401, 0x5, 0x0, 0xfff, 0xff, 0x1, 0x6, 0x37ef05cf, 0x7, 0x8, 0x9, 0x8, 0x8, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000003180)={'syztnl0\x00', &(0x7f0000003100)={'syztnl1\x00', 0x0, 0x4, 0x80, 0x2, 0x4, 0x2, @remote, @mcast2, 0x7, 0x1, 0x6c, 0x2}}) recvmsg(r8, &(0x7f0000003480)={&(0x7f00000031c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003400)=[{&(0x7f0000003240)=""/246, 0xf6}, {&(0x7f0000003340)=""/101, 0x65}, {&(0x7f00000033c0)=""/24, 0x18}], 0x3, &(0x7f0000003440)=""/18, 0x12}, 0x2100) socket(0x6, 0x6, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003500)={0x5, &(0x7f00000034c0)=[{0x4331, 0x9, 0x0, 0x20}, {0x2, 0xae, 0x0, 0x359c}, {0x1, 0x97, 0x5b, 0x9}, {0x1000, 0x2, 0x6, 0x8}, {0x58a7, 0xfd, 0x81, 0xfffffff8}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003580)=@getsa={0x2c0, 0x12, 0xffe9c81f3755c57a, 0x70bd2d, 0x25dfdbfb, {@in6=@empty, 0x4d4, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x48, 0x0}, 0x2, 0x1, 0x79}}, @algo_auth={0x5f, 0x1, {{'sha256-avx2\x00'}, 0xb8, "fb8bbf5769f0e64bf9218936e20c9da89f4565f696eb51"}}, @XFRMA_IF_ID={0x8, 0x1f, r10}, @algo_comp={0x115, 0x3, {{'deflate\x00'}, 0x668, "313e9001f1ac402e12e87d3d6ed868775931b128fd2875662df7fdf98a622ca465d703ba023ce830a75a84ef3c2585f4cc353047ee814704085c8b17c272e2024d70dc9b28a70c16588855201c62bef9c2320259eebb3864c678c0803dffc6114d481f2d4d2d7c91d1ae62aa33f94613234376c5ba96b135aa38ae5316e520cc8e4426fbd3f6ae14bd50c78637a27de5f45cbff9738a9183dc554f07c5108ca2284c62b856de7cc26ddce044eb6c2a8623ab353062bb393819f999fa67b16c806ab4d0110ac682dd9dd8c96697"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x8}, @migrate={0xe8, 0x11, [{@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x32, 0x2, 0x0, 0x3504, 0x2, 0xa}, {@in=@multicast1, @in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1, 0x32, 0x3, 0x0, 0x3505, 0x2, 0xa}, {@in=@empty, @in=@private=0xa010102, @in=@multicast1, @in=@remote, 0x3c, 0x0, 0x0, 0x3504, 0xa, 0xa}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) VM DIAGNOSIS: 00:21:18 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b9ffb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff1100373ff63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b9ffb48 RIP=ffffffff84d1a2d2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555878db400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555878e4c58 CR3=000000000d51f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10013cf046 R10=0000000000000001 R11=30393878302f6635 R12=000000000000000a R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556e197400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd088819368 CR3=000000000c457000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000