Warning: Permanently added '[localhost]:56820' (ECDSA) to the list of known hosts.
2026/01/17 16:13:20 fuzzer started
2026/01/17 16:13:20 dialing manager at localhost:42157
syzkaller login: [   52.384945] cgroup: Unknown subsys name 'net'
[   52.449774] cgroup: Unknown subsys name 'cpuset'
[   52.465601] cgroup: Unknown subsys name 'rlimit'
2026/01/17 16:13:31 syscalls: 204
2026/01/17 16:13:31 code coverage: enabled
2026/01/17 16:13:31 comparison tracing: enabled
2026/01/17 16:13:31 extra coverage: enabled
2026/01/17 16:13:31 setuid sandbox: enabled
2026/01/17 16:13:31 namespace sandbox: enabled
2026/01/17 16:13:31 Android sandbox: enabled
2026/01/17 16:13:31 fault injection: enabled
2026/01/17 16:13:31 leak checking: enabled
2026/01/17 16:13:31 net packet injection: enabled
2026/01/17 16:13:31 net device setup: enabled
2026/01/17 16:13:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/17 16:13:31 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/17 16:13:31 USB emulation: enabled
2026/01/17 16:13:31 hci packet injection: enabled
2026/01/17 16:13:31 wifi device emulation: enabled
2026/01/17 16:13:31 802.15.4 emulation: enabled
2026/01/17 16:13:31 fetching corpus: 0, signal 0/0 (executing program)
2026/01/17 16:13:32 starting 8 fuzzer processes
16:13:32 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)
r5 = pidfd_getfd(r1, r2, 0x0)
inotify_rm_watch(r5, 0x0)
connect$bt_sco(r0, &(0x7f0000001b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

16:13:32 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
r6 = pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000440)=0x4)
write$P9_RSETATTR(r6, &(0x7f0000000480)={0x7, 0x1b, 0x1}, 0x7)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r7)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x208, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x90b9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40084)

16:13:32 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', r7, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:13:32 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r8, 0x100, 0x70bd2d, 0x3f, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:13:32 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd3)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="e8d08db2f5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "39a44e1bc97ad31728eebf7a6e042c5e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ec776f1b2120"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x21, 0x34, @random="d176c285f71c5c2bce96f033cf0105a6393c7288aa374b13a9be5c94fa"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_BSSID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000700)={0x7, 0x80, 0xcc, 0x9, 0x2, 0x20, 0x0, 0xad6f, 0x1004, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f00000006c0), 0x4}, 0x8004, 0x20, 0x7, 0x7, 0x4000000000000000, 0x6, 0x400, 0x0, 0x47, 0x0, 0x8})

16:13:32 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6883}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2977b527e7f1070}, 0x34004889)
accept4$packet(r1, &(0x7f0000000b40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

16:13:32 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049084}, 0x20000010)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000010)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x58}}, 0x8010)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x19}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8008050}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
pipe(&(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000700)=0x5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb45, 0x9, 0x2, 0x2, 0x4f42, 0x4, 0x2, 0x51, 0x1f, 0x10001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ef9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x285}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6c7c, 0x6, 0x9, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9d02}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8014)
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000b80)={0xb5, "9f944301fda2016f11404c4d9ead59f440205e30ceda2bc197957361e55118789dc60919b7f0b98ef4d8df3afea0a56c3114227d88c91abc043d04ff7376357c358ac35fd29fd0926ebd89da4d1f2f6bdf956607d17dd8b43565c45ace2f8daa182628d4470f9a358d1baf0a120ba7b12e11cebfd19c11c9a6720b1e22458d6eaa850c313389df006d732e2c23a7b155dabb08091499cd3812d04e23c7e80150c6d46650133e719f34cac0ea8591fc759a61f1d5b8"})

16:13:32 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
process_mrelease(r1, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', <r8=>0x0, 0x2f, 0xc7, 0x2, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x717, 0x400, 0x80000001}})
sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001280)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x610, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xaf, 0x5, 0x4}, {0x2, 0x9, 0x33, 0x5}, {0xff, 0x0, 0x1f, 0x5f00000}, {0x4, 0x1, 0x64, 0xbc}, {0x2, 0x4, 0x1, 0x162}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000090)

[   63.033962] audit: type=1400 audit(1768666412.840:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
[   64.153579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.157326] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.158987] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.162797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.165206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.210991] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.212645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.213561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.214493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.220824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.221495] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.228311] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.229151] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.237035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.241002] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.280437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   64.282403] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   64.283252] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   64.286826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   64.293809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   64.301172] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   64.302589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   64.306705] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   64.312167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   64.314156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   64.315983] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   64.319217] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   64.320620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   64.322538] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   64.327872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   64.330296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   64.337827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   64.346049] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   64.352820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   64.353407] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   64.353994] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   64.355290] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   64.356014] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   64.372313] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   64.376834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   64.426287] modprobe (318) used greatest stack depth: 24072 bytes left
[   66.246799] Bluetooth: hci0: command tx timeout
[   66.310828] Bluetooth: hci2: command tx timeout
[   66.310930] Bluetooth: hci1: command tx timeout
[   66.375043] Bluetooth: hci4: command tx timeout
[   66.375480] Bluetooth: hci3: command tx timeout
[   66.376247] Bluetooth: hci6: command tx timeout
[   66.437827] Bluetooth: hci7: command tx timeout
[   66.438782] Bluetooth: hci5: command tx timeout
[   68.294265] Bluetooth: hci0: command tx timeout
[   68.358634] Bluetooth: hci1: command tx timeout
[   68.359167] Bluetooth: hci2: command tx timeout
[   68.421748] Bluetooth: hci3: command tx timeout
[   68.422750] Bluetooth: hci6: command tx timeout
[   68.423142] Bluetooth: hci4: command tx timeout
[   68.487552] Bluetooth: hci7: command tx timeout
[   68.488128] Bluetooth: hci5: command tx timeout
[   70.342697] Bluetooth: hci0: command tx timeout
[   70.406708] Bluetooth: hci1: command tx timeout
[   70.407155] Bluetooth: hci2: command tx timeout
[   70.469775] Bluetooth: hci4: command tx timeout
[   70.470212] Bluetooth: hci6: command tx timeout
[   70.470585] Bluetooth: hci3: command tx timeout
[   70.535699] Bluetooth: hci5: command tx timeout
[   70.536110] Bluetooth: hci7: command tx timeout
[   72.390711] Bluetooth: hci0: command tx timeout
[   72.453741] Bluetooth: hci2: command tx timeout
[   72.454133] Bluetooth: hci1: command tx timeout
[   72.517739] Bluetooth: hci3: command tx timeout
[   72.518140] Bluetooth: hci6: command tx timeout
[   72.518515] Bluetooth: hci4: command tx timeout
[   72.581717] Bluetooth: hci7: command tx timeout
[   72.582118] Bluetooth: hci5: command tx timeout
[   78.084877] modprobe (1733) used greatest stack depth: 24048 bytes left
[   97.917886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.918552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.035139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.036947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.199516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.201038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.316248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.321052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.402110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.402742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.409314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.409935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.529344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.530018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.618888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.619510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.724357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.725230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.793702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.794351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.884848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.885470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.984033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.984651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.204722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.205345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.268037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.268797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.341014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.341613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.469994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.470639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
16:14:20 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd3)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="e8d08db2f5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "39a44e1bc97ad31728eebf7a6e042c5e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ec776f1b2120"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x21, 0x34, @random="d176c285f71c5c2bce96f033cf0105a6393c7288aa374b13a9be5c94fa"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_BSSID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000700)={0x7, 0x80, 0xcc, 0x9, 0x2, 0x20, 0x0, 0xad6f, 0x1004, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f00000006c0), 0x4}, 0x8004, 0x20, 0x7, 0x7, 0x4000000000000000, 0x6, 0x400, 0x0, 0x47, 0x0, 0x8})

16:14:20 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r8, 0x100, 0x70bd2d, 0x3f, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:20 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)
r5 = pidfd_getfd(r1, r2, 0x0)
inotify_rm_watch(r5, 0x0)
connect$bt_sco(r0, &(0x7f0000001b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

16:14:20 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
process_mrelease(r1, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', <r8=>0x0, 0x2f, 0xc7, 0x2, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x717, 0x400, 0x80000001}})
sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001280)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x610, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xaf, 0x5, 0x4}, {0x2, 0x9, 0x33, 0x5}, {0xff, 0x0, 0x1f, 0x5f00000}, {0x4, 0x1, 0x64, 0xbc}, {0x2, 0x4, 0x1, 0x162}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000090)

16:14:20 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
r6 = pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000440)=0x4)
write$P9_RSETATTR(r6, &(0x7f0000000480)={0x7, 0x1b, 0x1}, 0x7)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r7)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x208, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x90b9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40084)

16:14:20 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049084}, 0x20000010)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000010)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x58}}, 0x8010)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x19}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8008050}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
pipe(&(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000700)=0x5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb45, 0x9, 0x2, 0x2, 0x4f42, 0x4, 0x2, 0x51, 0x1f, 0x10001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ef9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x285}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6c7c, 0x6, 0x9, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9d02}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8014)
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000b80)={0xb5, "9f944301fda2016f11404c4d9ead59f440205e30ceda2bc197957361e55118789dc60919b7f0b98ef4d8df3afea0a56c3114227d88c91abc043d04ff7376357c358ac35fd29fd0926ebd89da4d1f2f6bdf956607d17dd8b43565c45ace2f8daa182628d4470f9a358d1baf0a120ba7b12e11cebfd19c11c9a6720b1e22458d6eaa850c313389df006d732e2c23a7b155dabb08091499cd3812d04e23c7e80150c6d46650133e719f34cac0ea8591fc759a61f1d5b8"})

16:14:20 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6883}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2977b527e7f1070}, 0x34004889)
accept4$packet(r1, &(0x7f0000000b40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

16:14:20 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', r7, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:21 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)
r5 = pidfd_getfd(r1, r2, 0x0)
inotify_rm_watch(r5, 0x0)
connect$bt_sco(r0, &(0x7f0000001b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

16:14:21 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6883}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2977b527e7f1070}, 0x34004889)
accept4$packet(r1, &(0x7f0000000b40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

16:14:21 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
r6 = pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000440)=0x4)
write$P9_RSETATTR(r6, &(0x7f0000000480)={0x7, 0x1b, 0x1}, 0x7)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r7)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x208, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x90b9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40084)

16:14:21 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', r7, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:21 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd3)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="e8d08db2f5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "39a44e1bc97ad31728eebf7a6e042c5e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ec776f1b2120"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x21, 0x34, @random="d176c285f71c5c2bce96f033cf0105a6393c7288aa374b13a9be5c94fa"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_BSSID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000700)={0x7, 0x80, 0xcc, 0x9, 0x2, 0x20, 0x0, 0xad6f, 0x1004, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f00000006c0), 0x4}, 0x8004, 0x20, 0x7, 0x7, 0x4000000000000000, 0x6, 0x400, 0x0, 0x47, 0x0, 0x8})

16:14:29 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd3)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="e8d08db2f5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "39a44e1bc97ad31728eebf7a6e042c5e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ec776f1b2120"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x21, 0x34, @random="d176c285f71c5c2bce96f033cf0105a6393c7288aa374b13a9be5c94fa"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_BSSID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000700)={0x7, 0x80, 0xcc, 0x9, 0x2, 0x20, 0x0, 0xad6f, 0x1004, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f00000006c0), 0x4}, 0x8004, 0x20, 0x7, 0x7, 0x4000000000000000, 0x6, 0x400, 0x0, 0x47, 0x0, 0x8})

16:14:29 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', r7, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:29 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049084}, 0x20000010)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000010)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x58}}, 0x8010)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x19}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8008050}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
pipe(&(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000700)=0x5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb45, 0x9, 0x2, 0x2, 0x4f42, 0x4, 0x2, 0x51, 0x1f, 0x10001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ef9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x285}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6c7c, 0x6, 0x9, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9d02}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8014)
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000b80)={0xb5, "9f944301fda2016f11404c4d9ead59f440205e30ceda2bc197957361e55118789dc60919b7f0b98ef4d8df3afea0a56c3114227d88c91abc043d04ff7376357c358ac35fd29fd0926ebd89da4d1f2f6bdf956607d17dd8b43565c45ace2f8daa182628d4470f9a358d1baf0a120ba7b12e11cebfd19c11c9a6720b1e22458d6eaa850c313389df006d732e2c23a7b155dabb08091499cd3812d04e23c7e80150c6d46650133e719f34cac0ea8591fc759a61f1d5b8"})

16:14:29 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6883}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2977b527e7f1070}, 0x34004889)
accept4$packet(r1, &(0x7f0000000b40)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x800)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000e00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x1d4, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

16:14:29 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
r6 = pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000440)=0x4)
write$P9_RSETATTR(r6, &(0x7f0000000480)={0x7, 0x1b, 0x1}, 0x7)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r7)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x208, r8, 0x200, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x90b9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x10}, 0x40084)

16:14:29 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)
r5 = pidfd_getfd(r1, r2, 0x0)
inotify_rm_watch(r5, 0x0)
connect$bt_sco(r0, &(0x7f0000001b80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)

16:14:29 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r8, 0x100, 0x70bd2d, 0x3f, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:29 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
process_mrelease(r1, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', <r8=>0x0, 0x2f, 0xc7, 0x2, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x717, 0x400, 0x80000001}})
sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001280)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x610, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xaf, 0x5, 0x4}, {0x2, 0x9, 0x33, 0x5}, {0xff, 0x0, 0x1f, 0x5f00000}, {0x4, 0x1, 0x64, 0xbc}, {0x2, 0x4, 0x1, 0x162}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000090)

16:14:29 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r8, 0x100, 0x70bd2d, 0x3f, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xfff, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}]]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:29 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
r6 = pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000440)=0x4)
write$P9_RSETATTR(r6, &(0x7f0000000480)={0x7, 0x1b, 0x1}, 0x7)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r7)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000540))

16:14:29 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
process_mrelease(r1, 0x0)
r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', <r8=>0x0, 0x2f, 0xc7, 0x2, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x717, 0x400, 0x80000001}})
sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001280)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f0000000c00)={0x610, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x20c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xaf, 0x5, 0x4}, {0x2, 0x9, 0x33, 0x5}, {0xff, 0x0, 0x1f, 0x5f00000}, {0x4, 0x1, 0x64, 0xbc}, {0x2, 0x4, 0x1, 0x162}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7a4}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x29}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4d400}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x610}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000090)

16:14:29 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)
r5 = pidfd_getfd(r1, r2, 0x0)
inotify_rm_watch(r5, 0x0)

16:14:29 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6883}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2977b527e7f1070}, 0x34004889)
accept4$packet(r1, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000b80)=0x14, 0x800)

16:14:29 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:29 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
r6 = pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r7, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r7, 0x1261, &(0x7f0000000440)=0x4)
write$P9_RSETATTR(r6, &(0x7f0000000480)={0x7, 0x1b, 0x1}, 0x7)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r7)

16:14:29 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd3)
socket$packet(0x11, 0x2, 0x300)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xbc, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3e}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x9, 0x34, @random="e8d08db2f5"}, @NL80211_ATTR_PMKID={0x14, 0x55, "39a44e1bc97ad31728eebf7a6e042c5e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ec776f1b2120"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x21, 0x34, @random="d176c285f71c5c2bce96f033cf0105a6393c7288aa374b13a9be5c94fa"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3f}, @NL80211_ATTR_BSSID={0xa}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x4)

16:14:29 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c80)={'wlan1\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:29 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r6, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f0000000440)=0x4)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r6)

16:14:29 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
process_mrelease(r1, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000a00)={'ip6tnl0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x2f, 0xc7, 0x2, 0x0, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x717, 0x400, 0x80000001}})

16:14:38 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
process_mrelease(r1, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)

16:14:38 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)
pidfd_getfd(r1, r2, 0x0)

16:14:38 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xd3)
socket$packet(0x11, 0x2, 0x300)

16:14:38 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
write$P9_RATTACH(r6, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r6)

16:14:38 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:38 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)
sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xa4, r5, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6883}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2977b527e7f1070}, 0x34004889)

16:14:38 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:38 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049084}, 0x20000010)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000010)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x58}}, 0x8010)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x19}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8008050}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
pipe(&(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000700)=0x5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb45, 0x9, 0x2, 0x2, 0x4f42, 0x4, 0x2, 0x51, 0x1f, 0x10001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ef9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x285}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6c7c, 0x6, 0x9, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9d02}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8014)
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000b80)={0xb5, "9f944301fda2016f11404c4d9ead59f440205e30ceda2bc197957361e55118789dc60919b7f0b98ef4d8df3afea0a56c3114227d88c91abc043d04ff7376357c358ac35fd29fd0926ebd89da4d1f2f6bdf956607d17dd8b43565c45ace2f8daa182628d4470f9a358d1baf0a120ba7b12e11cebfd19c11c9a6720b1e22458d6eaa850c313389df006d732e2c23a7b155dabb08091499cd3812d04e23c7e80150c6d46650133e719f34cac0ea8591fc759a61f1d5b8"})

16:14:38 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)
write$P9_RMKNOD(r4, &(0x7f0000001b40)={0x14, 0x13, 0x1, {0x2, 0x2, 0x6}}, 0x14)

16:14:38 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:38 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)
syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r2)

16:14:38 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r6)

16:14:38 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:38 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
socket$packet(0x11, 0x2, 0x300)

[  128.712477] 
[  128.712806] =====================================
[  128.713512] WARNING: bad unlock balance detected!
[  128.714216] 6.19.0-rc5-next-20260116 #1 Not tainted
[  128.714949] -------------------------------------
[  128.715664] syz-executor.1/4083 is trying to release lock (rcu_read_lock) at:
[  128.718472] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  128.720804] but there are no more locks to release!
[  128.722797] 
[  128.722797] other info that might help us debug this:
[  128.725243] 4 locks held by syz-executor.1/4083:
[  128.725944]  #0: ffff88800f6c03f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  128.727247]  #1: ffff88803c888d68 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  128.728747]  #2: ffff88800f6c4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  128.730075]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  128.731447] 
[  128.731447] stack backtrace:
[  128.732126] CPU: 1 UID: 0 PID: 4083 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  128.732152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.732165] Call Trace:
[  128.732172]  <TASK>
[  128.732180]  dump_stack_lvl+0xca/0x120
[  128.732222]  ? __wait_on_freeing_inode+0x105/0x350
[  128.732248]  print_unlock_imbalance_bug+0x118/0x130
[  128.732274]  ? __wait_on_freeing_inode+0x105/0x350
[  128.732300]  lock_release+0x1ee/0x270
[  128.732327]  __wait_on_freeing_inode+0x10a/0x350
[  128.732353]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  128.732382]  ? __pfx_var_wake_function+0x10/0x10
[  128.732412]  ? lock_is_held_type+0x9e/0x120
[  128.732433]  insert_inode_locked+0x25f/0x890
[  128.732464]  __ext4_new_inode+0x223d/0x4cd0
[  128.732494]  ? __pfx___ext4_new_inode+0x10/0x10
[  128.732520]  ? __pfx___dquot_initialize+0x10/0x10
[  128.732552]  ? __pfx_avc_has_perm+0x10/0x10
[  128.732580]  ext4_symlink+0x623/0xb40
[  128.732613]  ? __pfx_ext4_symlink+0x10/0x10
[  128.732642]  ? security_inode_permission+0x72/0xe0
[  128.732665]  vfs_symlink+0x44b/0x840
[  128.732695]  filename_symlinkat+0x158/0x440
[  128.732721]  ? __pfx_filename_symlinkat+0x10/0x10
[  128.732750]  ? strncpy_from_user+0x21b/0x2f0
[  128.732780]  __x64_sys_symlink+0x82/0x110
[  128.732804]  do_syscall_64+0xbf/0x420
[  128.732827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.732849] RIP: 0033:0x7f5b5b323427
[  128.732865] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  128.732884] RSP: 002b:00007ffc1924ca18 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  128.732904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b5b323427
[  128.732918] RDX: 00007ffc1924caf7 RSI: 00007f5b5b37e019 RDI: 00007ffc1924cae0
[  128.732932] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc1924c8b0
[  128.732944] R10: 00007ffc1924c767 R11: 0000000000000206 R12: 0000000000000001
[  128.732957] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc1924cae0
[  128.732976]  </TASK>
[  128.761772] ------------[ cut here ]------------
[  128.762473] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.1/4083
[  128.790223] Modules linked in:
[  128.792476] CPU: 1 UID: 0 PID: 4083 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  128.823193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  128.852076] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  128.881180] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  128.912807] RSP: 0018:ffff888049e3f9a0 EFLAGS: 00010286
[  128.913606] RAX: 00000000ffffffff RBX: ffff88801b1e8000 RCX: ffffffff815660f7
[  128.966802] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801b1e83fc
[  129.024941] RBP: ffff88801b1e8000 R08: 0000000000000000 R09: fffffbfff0ba7040
[  129.083559] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b1e8000
[  129.141774] R13: 0000000000000001 R14: ffffffff85c0e640 R15: ffff88803c889fb0
[  129.200649] FS:  00005555698bb400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000
[  129.305866] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  129.309146] CR2: 00007f5b5b3a3541 CR3: 0000000041d42000 CR4: 0000000000350ef0
[  129.312032] Call Trace:
[  129.312492]  <TASK>
[  129.313839]  __wait_on_freeing_inode+0x10f/0x350
[  129.315142]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  129.317227]  ? __pfx_var_wake_function+0x10/0x10
[  129.319580]  ? lock_is_held_type+0x9e/0x120
[  129.321651]  insert_inode_locked+0x25f/0x890
[  129.324866]  __ext4_new_inode+0x223d/0x4cd0
[  129.329509]  ? __pfx___ext4_new_inode+0x10/0x10
[  129.331895]  ? __pfx___dquot_initialize+0x10/0x10
[  129.333308]  ? __pfx_avc_has_perm+0x10/0x10
[  129.336637]  ext4_symlink+0x623/0xb40
[  129.340956]  ? __pfx_ext4_symlink+0x10/0x10
[  129.342858]  ? security_inode_permission+0x72/0xe0
[  129.345937]  vfs_symlink+0x44b/0x840
[  129.348344]  filename_symlinkat+0x158/0x440
[  129.350484]  ? __pfx_filename_symlinkat+0x10/0x10
[  129.351965]  ? strncpy_from_user+0x21b/0x2f0
[  129.355475]  __x64_sys_symlink+0x82/0x110
[  129.356947]  do_syscall_64+0xbf/0x420
[  129.358452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.359473] RIP: 0033:0x7f5b5b323427
[  129.360243] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  129.362989] RSP: 002b:00007ffc1924ca18 EFLAGS: 00000206 ORIG_RAX: 0000000000000058
[  129.364194] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b5b323427
[  129.365324] RDX: 00007ffc1924caf7 RSI: 00007f5b5b37e019 RDI: 00007ffc1924cae0
[  129.366449] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc1924c8b0
[  129.367590] R10: 00007ffc1924c767 R11: 0000000000000206 R12: 0000000000000001
[  129.368794] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc1924cae0
[  129.373823]  </TASK>
[  129.374198] irq event stamp: 487
[  129.374774] hardirqs last  enabled at (487): [<ffffffff84d19a7c>] _raw_spin_unlock_irqrestore+0x2c/0x50
[  129.376364] hardirqs last disabled at (486): [<ffffffff84d197d3>] _raw_spin_lock_irqsave+0x53/0x60
[  129.377876] softirqs last  enabled at (482): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  129.379291] softirqs last disabled at (480): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  129.380823] ---[ end trace 0000000000000000 ]---
16:14:39 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:46 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r6)

16:14:46 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80)={<r7=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x74, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x41}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040020}, 0x48008)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:46 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000001b00), 0x402400, 0x0)

16:14:46 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049084}, 0x20000010)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000010)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x58}}, 0x8010)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x19}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8008050}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
pipe(&(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000700)=0x5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb45, 0x9, 0x2, 0x2, 0x4f42, 0x4, 0x2, 0x51, 0x1f, 0x10001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ef9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x285}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6c7c, 0x6, 0x9, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9d02}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8014)

16:14:46 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x24000850)

16:14:46 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
write$cgroup_subtree(r3, &(0x7f0000000700)={[{0x2b, 'cpuset'}]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:46 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)

16:14:46 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
socket$packet(0x11, 0x2, 0x300)

16:14:46 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)

16:14:46 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:46 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000500), r6)

16:14:46 executing program 0:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$bt_sco(r0, &(0x7f0000000000), 0x8)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x3, 0xffffffff, 0x36ac})
connect$bt_sco(r1, &(0x7f00000000c0), 0x8)
ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000100)={{0x3, 0xffffffff, 0x9, 0x3, 0xcf0, 0xffff21b8}, 0x190, [0x0, 0x5, 0x80, 0x4, 0x8, 0x5, 0x0, 0x3, 0x6, 0x4, 0x40, 0x200000, 0x4, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1, 0x8, 0xfff, 0x7ff, 0x7, 0x470, 0x4, 0x1, 0x1f, 0x3, 0xfff, 0x2, 0x6, 0xec, 0xfff, 0x8, 0x3f, 0xfffffff8, 0x4, 0x9, 0x8000, 0x81, 0x3, 0x80000001, 0x800, 0x1, 0x7, 0x1, 0x16a, 0x1, 0x4, 0x8, 0x3, 0x8001, 0x5, 0x9, 0x1f, 0x8, 0x5, 0xfffffffa, 0x200, 0x6, 0x7, 0x7f, 0xf501100, 0x2b8, 0x722d07fc, 0x2, 0x0, 0x7ff, 0x7ff, 0x0, 0x1, 0x7fff, 0x9, 0xfffffff8, 0xd5b, 0x6424, 0xff, 0x200, 0xffffffc8, 0x20, 0x4, 0x0, 0x7, 0x400, 0xef, 0xffff, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x91, 0x200, 0x1, 0xcbbc, 0xfffffff9, 0x7, 0xfffffffd, 0xff, 0x5, 0x1, 0x40, 0x9b3, 0x5, 0x10000, 0x4b0a575c, 0x9, 0x0, 0x1, 0x0, 0x200, 0xeec3, 0x7fff, 0x4, 0x0, 0x9, 0x4, 0x1000, 0x13c3, 0x8, 0x4, 0x3, 0x7, 0x718b, 0x0, 0xfffffdfb, 0x2a, 0x200, 0x0, 0x10000, 0x2, 0x80000001, 0x9, 0x7, 0x23, 0x6af, 0x3, 0x3, 0x7b7, 0x5, 0x3ff, 0xff, 0xfffffffa, 0x3, 0x71, 0x80000000, 0x5, 0xee, 0x0, 0x8, 0x9, 0x37, 0x6ccf1857, 0x2, 0x7fffffff, 0x7ff, 0x7f, 0x80000000, 0x5c2, 0xff9f6, 0x401, 0x3, 0x5, 0x0, 0xf9, 0xc21, 0x0, 0x6, 0x4, 0x80, 0xff, 0x2, 0x5177, 0x3, 0x7, 0x5, 0x3, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x8001, 0x0, 0x6, 0x20, 0x10001, 0x1, 0x5, 0x9, 0xe7, 0x40, 0x7, 0x7, 0x453a0f1c, 0x5, 0x0, 0x20, 0x0, 0x3, 0x6, 0x1, 0x9, 0x8001, 0x7, 0x394, 0x5b3, 0x3ff, 0x6, 0x1f, 0x8001, 0xfffffffc, 0x7, 0x5, 0x33c4, 0xfffffff9, 0x1f28, 0x0, 0x597, 0x5, 0x97a, 0x8, 0xdd9, 0x6, 0xff, 0x0, 0x7fff, 0x3f, 0x200, 0x100, 0x1, 0x3f, 0x6, 0x200, 0x20, 0x1, 0x2, 0x0, 0xfffffff8, 0x10000, 0x5, 0x40000000, 0x7b, 0x630d, 0x40, 0x1, 0x9, 0x200, 0x40, 0x7, 0x2, 0x9, 0x80000001, 0x1000, 0x5, 0x8, 0x9, 0xfffffffa, 0x1f, 0x6, 0x2, 0x4, 0x101, 0x0, 0x8, 0x6, 0x0, 0x0, 0x6, 0x40, 0x800, 0x7, 0x5, 0x2, 0x0, 0x10000, 0x5, 0x6, 0x2, 0x10001, 0x5, 0x6, 0x6, 0x7, 0xff, 0xfffffff7, 0x7fffffff, 0x7, 0x3c, 0xffff, 0x3b, 0x1000, 0x101, 0x6, 0x401, 0x8000, 0x9, 0x40, 0x80, 0x7, 0x2, 0x101, 0xad14, 0x6b68, 0x6, 0x0, 0x4, 0x6d, 0x10001, 0x200, 0x7, 0x8, 0x8, 0x200, 0x2, 0x0, 0x2a1, 0x9, 0x0, 0x20, 0x4, 0x3, 0x6, 0x28, 0x626a, 0x0, 0x1ff, 0x2, 0x9, 0x0, 0xff, 0xe52, 0x1, 0x5, 0x4, 0x0, 0x80000000, 0x3, 0x2, 0x0, 0x3, 0x3, 0x0, 0xffffffff, 0x6, 0x20, 0x100, 0x0, 0x9, 0x81, 0x800, 0xfffffff8, 0x4, 0x0, 0x0, 0xe323, 0xffffffb3, 0x9, 0xfffffff8, 0x5, 0x7, 0x80000000, 0x101, 0x7, 0xcad2, 0x95, 0x3212, 0x1, 0xffff, 0x8001, 0x80000000, 0x26, 0x1, 0x0, 0x1, 0x7f, 0xa035, 0x5, 0x5, 0x2, 0x248, 0x2, 0x7, 0x2, 0x4ee6089a, 0x46, 0x57, 0x1, 0x400, 0x9, 0x7, 0x5, 0x80000000, 0x18000000, 0x0, 0xffff, 0x1, 0x20b8, 0x403f, 0x100, 0x2, 0xbb, 0x4, 0x82, 0x2, 0x800, 0xfffffffb, 0xcf, 0x2a, 0x80000001, 0xffffff7f, 0x1, 0xfffffffb, 0x3e, 0x7ff, 0x8, 0x3, 0x15b, 0x965a, 0xffffffc1, 0x7fffffff, 0x9, 0x3ff, 0x3, 0xffff, 0x2, 0x0, 0x5, 0x7, 0x10000, 0x9, 0xde, 0x8, 0x9c9, 0x8, 0x8, 0x2, 0x0, 0x100, 0x2, 0x9ed, 0x2fc, 0x6, 0x20, 0x1, 0x9, 0x5, 0x6, 0x10001, 0x8, 0x4e1, 0xf744, 0x401, 0x1000, 0x4, 0x3f, 0x3f, 0x800, 0x3ff, 0x8, 0x9, 0x264c47a, 0x4, 0x1, 0x4, 0x14, 0x101, 0x4, 0xffffff7f, 0x5, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x3fd4, 0xb, 0xfffffffc, 0x484, 0x9, 0x80000001, 0x80000001, 0x400, 0x3, 0x200, 0x6, 0xdb20, 0x8c22, 0xffffffff, 0x7, 0x2, 0xd0e6, 0x8, 0x7, 0x7f, 0x2d, 0x4e3b, 0x0, 0xc4a, 0x7, 0xe0, 0x1, 0xf5, 0x2, 0x9, 0xfffffffa, 0x8, 0x9, 0x4, 0xffffff00, 0x2, 0x10000, 0xfffffff8, 0x7fff, 0x2, 0x8, 0x0, 0x200, 0xfffffd68, 0x80000001, 0xcd, 0x3, 0x2, 0x4, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x7, 0xf615, 0x3, 0x1f, 0x80000000, 0x400, 0x8, 0xfff, 0x2, 0x655, 0xfffffffa, 0xdfd, 0x81, 0x4, 0x2d3d, 0x10000, 0x1, 0x7ff, 0x7, 0xffffffff, 0xffffffff, 0x3ff, 0x7, 0x1, 0x8, 0x0, 0x80000001, 0x6, 0x3f, 0x8, 0x2a, 0x0, 0x100, 0x9, 0xffff, 0xd9f, 0x5, 0x35, 0xffffff73, 0x7fff, 0x3, 0x1ff, 0x4, 0x8, 0xe3, 0x7, 0xfff, 0x10001, 0x79, 0x32, 0x1ff, 0x5, 0xad1, 0x4, 0x4, 0x5, 0x6, 0x7, 0x2, 0xfffffffd, 0x41e, 0x8, 0x2, 0x3, 0x3, 0x9a73, 0xb0, 0x61, 0x1, 0x6, 0x2, 0x2, 0x3f, 0x1, 0x9, 0xbb, 0x1, 0x8, 0x4, 0x1db, 0x10001, 0xc3, 0x1, 0x2, 0x3, 0x400, 0x8, 0x7fff, 0x8, 0x1, 0x800, 0x0, 0x4, 0x200, 0x3, 0x3, 0x63, 0x7, 0xfffffffe, 0x8, 0x8c52, 0xa22, 0x80, 0x0, 0xbe5, 0x0, 0xd69a, 0xffff, 0xffff, 0x129, 0x6, 0xfffffffb, 0x3f, 0x5, 0xffffffff, 0x7fff, 0x2, 0x4, 0xf6, 0x1ff, 0x3, 0x2d, 0x100, 0xfa7, 0x7, 0x9, 0x8, 0x7, 0x3, 0x45, 0x3ff, 0x6, 0x7, 0x7, 0xed, 0x1, 0x59, 0x565, 0x64, 0x5, 0x8001, 0x7, 0x401, 0xd8ef, 0xb5, 0xd85, 0x1, 0x8, 0x80, 0x2, 0x6, 0x0, 0x4, 0x7, 0x3, 0xfff, 0x4, 0xffffffff, 0x3f, 0xfc, 0x7fff, 0x0, 0x8, 0x8000, 0x401, 0x7fff, 0x5, 0x7fffffff, 0x2, 0x5, 0x7, 0x7fffffff, 0x9, 0x6, 0x8, 0x2, 0x6, 0x1, 0x6, 0x205d, 0x7fffffff, 0x2, 0x9, 0x9, 0x4, 0xdc, 0x9, 0x7c, 0x2, 0x1, 0x8, 0x200, 0x211120a2, 0x54, 0x401, 0x9, 0x4, 0x0, 0x81, 0x8, 0x1f, 0xffff, 0x5, 0xff, 0x10000, 0x0, 0x7, 0x5, 0x2, 0xdc9b, 0x1, 0x3, 0xfffffffd, 0x9, 0x754fb722, 0x1f, 0xffffffff, 0x100, 0x3efdf38, 0x80000001, 0x7, 0x1, 0x1, 0x195, 0x8, 0xd9, 0x5, 0x1, 0x8b1, 0x7, 0x28a7, 0xffffffff, 0x5, 0x20, 0x4, 0x27c, 0x10000, 0x6, 0x800, 0x6, 0xee6, 0x0, 0x46c, 0x8, 0x81, 0x9c2, 0x9, 0x8001, 0x1, 0xcdc, 0x2, 0x2, 0xfffffffe, 0x1400, 0x9, 0x1f, 0x1, 0x100, 0x4, 0x2, 0x0, 0x5, 0x17, 0x6, 0x6, 0x8000, 0x7f, 0x2, 0x8, 0x9c41, 0x3d, 0x2, 0x0, 0x3, 0x5, 0xa956, 0xf43, 0x100, 0x7fff, 0x100, 0x200, 0x5c2feb55, 0x8, 0x1, 0xfff, 0x2, 0x4, 0x2, 0x9, 0x200, 0x7, 0x80000000, 0x9, 0x5, 0xb49, 0x3, 0x78a, 0x3, 0xffff, 0x3f, 0x7, 0x9, 0xdb, 0xbc5, 0x4, 0x1, 0x1, 0x3, 0x1ff, 0x81, 0x40, 0x7, 0x8001, 0x8001, 0x5, 0x5, 0x20, 0x9, 0x10000, 0xfffff001, 0x0, 0x9, 0xece, 0xffffffe0, 0x7, 0xfffffff7, 0x8, 0x7, 0xffc7, 0x401, 0x10001, 0x7f, 0x0, 0x2, 0x5, 0x9, 0x3, 0x10001, 0xfffffffa, 0x10000, 0x7ff, 0x7, 0x80, 0x1b, 0x7ff, 0x2, 0x3, 0x43a, 0x1, 0x7, 0x9, 0xffffffff, 0x80000001, 0x7, 0x3f, 0x8, 0x5, 0x3, 0x80000000, 0x7, 0xdc, 0x101, 0x780f, 0x9, 0x1000, 0x4, 0x2, 0x1, 0x5f, 0x10000, 0x4, 0x7fff, 0x1, 0x7abc, 0x9, 0x9, 0x401, 0x17, 0x3, 0x9, 0x3f, 0x800, 0x10000, 0x9, 0x9, 0xdb, 0x200, 0x4, 0xc943, 0x1, 0x5, 0x8, 0x2012, 0xfff, 0x7, 0x2, 0x4, 0x3ff, 0x81, 0x1f, 0x100, 0x7, 0x7, 0x81, 0xc, 0x3, 0x2, 0x6, 0x7, 0x7, 0x56f, 0x3, 0x0, 0x8, 0xb1, 0x5, 0x3ff, 0x9, 0x7f, 0xdb77, 0x0, 0x3759, 0x5, 0x3f, 0x101, 0x1000, 0xb31, 0x2, 0x3, 0x4, 0x7, 0x7, 0x2, 0x401, 0x7ff, 0x7fff, 0x7fff, 0x81, 0xaa, 0x200, 0x1, 0x44, 0x3, 0x6, 0x0, 0x3, 0x0, 0x7387941d, 0xffff7fff, 0x8, 0x867, 0x101, 0x0, 0x0, 0x33ec, 0x1f, 0x9, 0x1000000, 0x1, 0x20, 0x5, 0x0, 0x9, 0x80000000, 0x6, 0x8, 0x2c, 0x6, 0x7, 0x9, 0x36, 0x3, 0x10001, 0x40, 0x0, 0x80000000, 0x0, 0x1000, 0x6, 0x2ce, 0x7fff, 0x4, 0x101, 0x5b, 0x200, 0x8000, 0x0, 0x4, 0xff, 0xffffffff, 0x0, 0x4, 0x20, 0x6]})
r2 = syz_open_dev$hiddev(&(0x7f0000001140), 0x3, 0x400000)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000001180)={0x3, 0x100, 0xfc000000, 0x2, 0x3ff, 0x1f, 0x100, 0x4, 0x4, 0x3, 0x1ff, 0x7, 0x9, 0x81})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000011c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001780)={0x118, 0x0, &(0x7f0000001600)=[@request_death, @release={0x40046306, 0x2}, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000012c0)={@fda={0x66646185, 0x3, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000001200)=""/44, 0x2c, 0x0, 0x24}, @ptr={0x70742a85, 0x0, &(0x7f0000001240)=""/100, 0x64, 0x0, 0x2d}}, &(0x7f0000001340)={0x0, 0x20, 0x48}}, 0x400}, @decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001480)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001380)=""/252, 0xfc, 0x0, 0xd}, @fda={0x66646185, 0xa, 0x0, 0x10}}, &(0x7f0000001500)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x3}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001540)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x3, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x1, 0xf}}, &(0x7f00000015c0)={0x0, 0x18, 0x38}}, 0x40}], 0x3b, 0x0, &(0x7f0000001740)="f5312214380ca2d69f23bb518fe2d682300c0d682169acc78599b964253693a821fb5663c352bc35bf97d0abb7bd17236e26cda39bcb0869df008a"})
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x88}, 0x20048821)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r1)
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
inotify_rm_watch(r0, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x10)

16:14:46 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:46 executing program 3:
r0 = socket(0x25, 0x800, 0x5)
sendmsg$802154_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000100)={&(0x7f0000000040)="d0444918e5054c18d83491b357a3a5ce8e04a9d823f20633f3e1f4c6b827bed3753f876001ade57602c11dfd660fdfd87b967ff1019aae96b6f2f46145a068c520543d53a46160f4631d10410f1eb046bebf4ae7f7e09a28fa01f97da28758674043216eb6574b48037a66459026f2fc6706d00361710ae0706f7fb4e0816ed1ca092984b0a64063e1f38f1cf6b0eb4290aac921", 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x32000, 0x104)
r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
bind$bt_sco(r0, &(0x7f00000001c0)={0x1f, @none}, 0x8)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5d}, @void, @val={0xc, 0x99, {0x6, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x48085)
r4 = accept4$packet(r0, 0x0, &(0x7f0000000340), 0x80000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'})
accept4$packet(r1, &(0x7f00000003c0), &(0x7f0000000400)=0x14, 0xc0800)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000440)={0x6})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1)
syz_open_dev$hiddev(&(0x7f00000004c0), 0x6, 0x82000)
socket$packet(0x11, 0x2, 0x300)

16:14:46 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:46 executing program 7:
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44084)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x35}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8014}, 0x4000011)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20900, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000300)=0x1b, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x68, 0x0, &(0x7f0000000380)=[@acquire_done={0x40106309, 0x1}, @request_death={0x400c630e, 0x1}, @register_looper, @register_looper, @exit_looper, @clear_death={0x400c630f, 0x3}, @free_buffer={0x40086303, r5}, @acquire, @acquire_done={0x40106309, 0x3}], 0xdb, 0x0, &(0x7f0000000400)="3aef2f341b0865dd058c1f2d228a34890e07ffdce594718e66ea3dbcc9339f32cb0455e5a669d6310ffe093f96d14013bb3f55e0a4f45b97a785e85e9d145661a53f6c94e9aa8a9b87f32d1373d719a671cfd2b98550723c7d4bfa9596c9126326e9802d2c0ada16f0b7a65060b0d7f2532644146391b4bb6f381913ef6be43823e91a68eaf72045c1e159668104e1c8da544312c4900b00e9d149c59c2939daad1f7027b24e38c599f5f470033612b2609072a76f5150af2d7f9935bfc0350d0e54c40db7d5eddc13fb5a7d489c4a8bbfefc331cdc1e1b52b2d8a"})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000580)={&(0x7f0000000540), 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r6 = socket$netlink(0x10, 0x3, 0x17)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, 'CIBJB'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, r0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x3f}, @NL80211_ATTR_IE={0xd, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1f, 0x8c, 0x6b}}, @dsss={0x3, 0x1, 0x95}]}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4002041}, 0x4000814)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044041}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x4200, 0x0)

16:14:46 executing program 6:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000080)={0x5, 0x80, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x18284, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xff, 0x0, @perf_bp={&(0x7f0000000040)}, 0x41, 0xffffffffffffffe1, 0x18000000, 0x2, 0x100000001, 0x10000, 0x4, 0x0, 0x3, 0x0, 0x1ff})
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
pidfd_send_signal(r0, 0x21, &(0x7f0000000100)={0x36, 0x401, 0x899}, 0x0)
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0)
getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f00000001c0)=""/14, &(0x7f0000000200)=0xe)
sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x42, 0x0, &(0x7f0000000400)="858bc71c91d4a072b2783d154b1e573cc42d6cfdb61a84ee5df5fec7c2437576927cd4dbca013cba25a96cd91fa6aa787f8414e4abe774f29c8c91d7984ad5107883"})
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0)
r3 = pidfd_getfd(r1, r0, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x11c, 0x0, 0x220acbc9fb175bad, 0x70bd27, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x7, 0x4)

16:14:46 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f00000000c0)={0x7fa3e0a2, 0x7, 0x6})
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x58080, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
openat$cgroup_int(r2, &(0x7f0000000280)='cpu.max\x00', 0x2, 0x0)
r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x41000, 0x0)
pidfd_getfd(r4, r5, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000340), 0x80000000, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14)
syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff)

16:14:46 executing program 5:
r0 = socket(0x29, 0x6, 0x312)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0xd, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="b72e7b890a5f"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_PMKID={0x14, 0x55, "86a9368864e0c0d1a32ab4bde9319261"}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x90, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4d, 0xbe, "cad00a0214faf81a3071e44ca634a9476fa128700ffc68cf638aeaacaa446f4a4a71d7672797170c24d8301a024b2a1dcc83995d94033f29c85453e0c5fedfc41faa39adcd157a9f1c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4041414)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xe}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040894}, 0x40)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r3, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_chsw={0x76, 0x6, {0x3f, 0x3, 0x29, 0xfff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0, 0x2, 0x9}}]}, @NL80211_ATTR_MDID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040000}, 0xc041)
pipe(&(0x7f0000000780)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$FOU_CMD_DEL(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000001}, 0x80)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x5c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf771, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x95}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x2}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x440d4)
pipe(&(0x7f0000000a80))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r5)

16:14:46 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x2d0e6d14)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x160, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2000, 0xe}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000002c0))
r1 = pidfd_getfd(r0, r0, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2)
r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x8001, 0x40081)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000340)=[0x13c079a0, 0x7ff])
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x529101, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000003c0)={0x55, 0x8, 0x0, {0x7, 0x401}, {0x8, 0x8}, @ramp={0x0, 0x6, {0x5, 0x4, 0x3}}})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @release={0x40046306, 0x3}, @exit_looper], 0x8b, 0x0, &(0x7f0000000580)="0967d9bf444f1dc11865a941b2df99d89fb84a924eebb52bb67a2ccf0361ceffede8343c25ee3fcd3ad69043c607500e8b121aaa18bd26f3335c1baa556732ae78a4f946dad48eba4dce1a6ea3e754527762afe1d2cfb69966868a1e52e2d2d6a08e5e5101f11b8769c59f40ee41656c4c6be96937593f9157ddfef4e71bfc71a064b8ddc5b70df0409ea7"})
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000680), 0x6, 0x101002)
ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000006c0))
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x2f, 0x70, 0x3, 0x7, 0x20, @private0, @empty, 0x1, 0x10, 0x20, 0x7}})

16:14:46 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4049084}, 0x20000010)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x44}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x20000010)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x76}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ee}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80000001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}]}]}, 0x58}}, 0x8010)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x19}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8008050}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3ff, 0x6a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x40000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
pipe(&(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000700)=0x5, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r7, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0xb45, 0x9, 0x2, 0x2, 0x4f42, 0x4, 0x2, 0x51, 0x1f, 0x10001]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3fe}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x401}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}, @NL80211_ATTR_CQM={0x54, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6f5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xcb}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x54d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2ef9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x6, 0x1f]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x285}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffff7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x31}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x437}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x6c7c, 0x6, 0x9, 0x7ff]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9d02}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xac}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x55}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r6, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r8)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x2c}}, 0x8014)


VM DIAGNOSIS:
16:14:38  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801a44fb40
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff11003489f69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a44fb78
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558c057400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe1900000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558c060c58 CR3=000000000e804000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff829750a0 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff888049e3f410
R8 =0000000000000000 R9 =ffffed10016a2046 R10=00000000000fe503 R11=6e6920726568746f
R12=0000000000000823 R13=0000000000000060 R14=fffffbfff113838e R15=dffffc0000000000
RIP=ffffffff829750f5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00005555698bb400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe6000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5b5b3a3541 CR3=0000000041d42000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000