Warning: Permanently added '[localhost]:38387' (ECDSA) to the list of known hosts.
2026/01/17 19:16:16 fuzzer started
2026/01/17 19:16:16 dialing manager at localhost:42157
syzkaller login: [   52.326844] cgroup: Unknown subsys name 'net'
[   52.405130] cgroup: Unknown subsys name 'cpuset'
[   52.421284] cgroup: Unknown subsys name 'rlimit'
2026/01/17 19:16:27 syscalls: 212
2026/01/17 19:16:27 code coverage: enabled
2026/01/17 19:16:27 comparison tracing: enabled
2026/01/17 19:16:27 extra coverage: enabled
2026/01/17 19:16:27 setuid sandbox: enabled
2026/01/17 19:16:27 namespace sandbox: enabled
2026/01/17 19:16:27 Android sandbox: enabled
2026/01/17 19:16:27 fault injection: enabled
2026/01/17 19:16:27 leak checking: enabled
2026/01/17 19:16:27 net packet injection: enabled
2026/01/17 19:16:27 net device setup: enabled
2026/01/17 19:16:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2026/01/17 19:16:27 devlink PCI setup: PCI device 0000:00:10.0 is not available
2026/01/17 19:16:27 USB emulation: enabled
2026/01/17 19:16:27 hci packet injection: enabled
2026/01/17 19:16:27 wifi device emulation: enabled
2026/01/17 19:16:27 802.15.4 emulation: enabled
2026/01/17 19:16:27 fetching corpus: 0, signal 0/0 (executing program)
2026/01/17 19:16:28 starting 8 fuzzer processes
19:16:28 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
move_pages(r1, 0xa, &(0x7f0000000a40)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000ac0)=[0x2, 0x7, 0x7fff, 0x7fffffff, 0x7, 0x1ff, 0x3329, 0xfffffffe], &(0x7f0000000b00)=[0x0], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "7a52fb2024c4fe"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x3)

19:16:28 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001240)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000c40)={0x58c, r2, 0x100, 0x6, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x562, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @random="c4ee6d8efa2b", {0x8, 0xff9}}, @ver_80211n={0x0, 0x5e, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0xb84f6c4fd46a0204, 0x7f, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x6c, "75f8f25127c06c363927fc3649ed754557faaf7359856928f9f6069dad367e324b00fc66d39ab9bc9f2760106ea436ca42b4f210bac01cd51fd71dbd37f2f6d47dcef30dc7fd4b8deb48f23aa82ca1620b12b369ddfd877aa4473f95e1612e2f1a5196138a6c7077f68434aa"}, {0xdd, 0x90, "5abb8d8422a4a26ed748e03d09af2c9f36d087e964799d8687ef98c637829dc5a09c4bc43c1ea81db354581bb9cf41bf5e47b50e026c3071dc6559db45319b60f6e5c955a5e54f51d7c27bfc858ef9cfd1fc215e18e895ca348661ef7bd70ba5a116a23c16dc96c7df3307c889e7359b3e7417bead7a45028efcb2d163694251e266423b37941196b4aae81dfdb98775"}, {0xdd, 0x57, "7af5bfd0a20ab76f757d7efdbbb52f64e31f3652d57f450da1387a9ea3675ab81ca95b15f74d8d6731fe39cd8f67ec8ec35f8a2babc24ce2b3b0e4c1c7bb815e7e5065d81cafeae6cf364656739f6f4e6fd0610794c447"}, {0xdd, 0xd5, "a43f69e202fb52ae0b7ce78a2c93352bc9a4f9d41631a27bf7bd878ff655d4d2a8c7e419d5ddeeade34eaeed453c75944ccd2733bc04d682397a53cf4585fc131b47aa2cc093e640103f74958cb12c5e11bff89fded18a1c993443ec5426ecd7af559a06ea2fb61e036eeda7414f08d812825c6811b22f07fec57e10e4cd7bccb2801682a30168efe93028a48e83323feb03f6b37159a8154e14258b310c085531aa0d142cd0a67e9086a69f4dca1e4099540673a12b2825f2f22066f924fd70a8c6a8c1fb3dc769e7d3882328122343b4a36aa439"}, {0xdd, 0x12, "c3af219ede2a0d4826bd076e10b138f6421e"}, {0xdd, 0x9b, "9ce9658e47c889521d047c5d5a2c2566cd228065c660e89862a09690ce3dceeb435e62711a85c1dcb26eab3374a4e1803230e26248d645d513977615b17a26b657654376de9127cdc7eda86e0023cec563faad8643a1a501af119e7f85073f1837c0a53fbcaab53e74fcc33e98b918dccb460ec03fee13f074e415880aab397189d04fb10ab056936f525bc0714635887e58b704b2b82df0fa17a9"}, {0xdd, 0xd9, "6da8aa04fe6a7820b3cd673d879706e37dfda93c0280aa613d69805b1445c0f08ae50c523af191a0f3dd82768ccde25e681a4a50ac3968260394ff4410bbbc26a6c7e99fd57b4e68bf633753a300afb2bc2bf19b0a7950e2dfbcf707987cc53d1e50b08d768b779f6db04ce8cc08d8d332c7fc99a2ed032ab499cc13c34c0065e394dc4ba07e207c904c7b81d6e9664e83db8d7cd8001581e079f95bcac12bc13149b2316ab0f1afc2d3987322a1c073c60969084a043e9a13854c1853808aaf0db5949a4103fae211f3707f73a514494e6631bb64e4a99fad"}, {0xdd, 0xd5, "08402622e6ac11f70fb2ba14054493efdcd21099a28f465b791695238533821d35a96f5e8b72fd13a4842ce57431c77c5023f85493f3a5be1f4514a4e146b3a84dc60b9b6f2e29084ec17949400ef39cf54889ac44b0d1e4028f8b978b2294a079fbba8a9fb72322622e96d137b5c40742d639cd0a7343b6525592d00bc1cb273cd42853403f5e31870d6f035438640d56ada1506e2b5906bf20988ccc3e57ca7953ae7720fce53c33f7f376cbe0c1f206b66c665e07924df46727e277cd14e569a9728a7696fed1307c6ab9bb3a982f1f79e2caa0"}, {0xdd, 0xa1, "5727b75fc0730b8fb540299f5262f3cf9692cdc8ec318ac876adadaf16dbd715ff0764e27a7393071041e3e33592c4932d7e6a6a7c5f1f3c577ce408a319ddf4595888ffea19db09048d4c3650f9f589d257a8bcf14d202a8b35cd3e24ee6cab9ae826d1e6244365fcd52b376ccbb34afedcf0cae3554377e6e58024783a7437c98eb08d39b4f3092500f4c21ece8121950c40e12bfa74ef61ea41ef121e0fda27"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

19:16:28 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:16:28 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x30c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb1479818d65a10a87b1fe3135254229cbe40c2461c3ba81659877c3ab997c65"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="987c355f34f04e23da4fb545ef3f3525"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2b5fc186980c30b687476050e5792764"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3e0f65a31122c3a"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c66a8365b40a16669a9e45e0cc78a4f2dc070148985da6dd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9200a9281cd68827c3293aaeaf7ff415"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d90cd86603389706bb9436d9fccdfe9aff552718b44b36b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2cd4d0944fa23a2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c6a1fb0fb86b244b83c3592d7d8b7885"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7735cc225b090545dfb4a0d56d5dd40c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="839d8c0923a4f7615586429c3829ba00"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f41}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="96f71afef45dab303be3614b5b49d7e3a52dc329a6ee5332"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="106b4862c7ab4e7da7e6654d790c5a9ca96991326c0915c883784d26f63c1506"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3f3445824e121fe9d10360070fc9e16d71199d1ecb310a40f004815497d107e0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="393f3ff7e08a56e9f19449b20eb179469af7f143576071a68dd038dd55719f3a"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7929b700de5f1750ee3c6cb4c54d95a1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="991777c0c4ee2db343bdca0a5ab82cb162f0211f21b94c50"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4808e006ec0fd46e92ae02208e69ba25"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb34205bebd30ef6e62fe62d8ce1ddbed0d91a09eab018d7aefcb74cc6cef625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d05ef87b5a3d920b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3981d4693fdd190"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "151e0f0108f618a3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd0394f05aab0427b1df1a84fac83e51550fe8a1e3892277"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3bf6774be1a47d4b2e44a18fb7aa94afedc919359929f2b6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f15fd68f05871ecaf40c42db4e44ef0f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff0000}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efe595d09cd5bd65"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1eccbd893046728c4f95300d9350336d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f4df29a44d95f5e35e4df0b20e44cbae53f553cf92345a92a5cbde75129ae9cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e4b519519a6f6ce3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5a}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cc14d6d97f3ff5d48457cf56a16aecfb"}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[   63.082228] audit: type=1400 audit(1768677388.999:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
19:16:28 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000640))

19:16:28 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:16:28 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
r6 = socket(0x26, 0x3, 0x7)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000f40))
socket$inet_tcp(0x2, 0x1, 0x0)

19:16:29 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "87bc4da7dbc00a4d7781539cd2bfe24f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c890}, 0x4000)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000880))

[   64.223115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.224518] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.226471] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.230499] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.234515] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.281373] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.289186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.294203] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.297765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.303324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.421242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.428681] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   64.429502] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   64.431019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   64.432010] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   64.432838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   64.433554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   64.434797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.434970] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   64.436917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   64.437586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   64.440666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   64.441337] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   64.442025] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.444891] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   64.445515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   64.447365] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   64.448835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   64.452364] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   64.455873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.469974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   64.473070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.476358] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   64.480295] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   64.480963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   64.483218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   64.484122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   64.492639] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   64.493185] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   64.499378] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   66.316187] Bluetooth: hci0: command tx timeout
[   66.380530] Bluetooth: hci1: command tx timeout
[   66.508164] Bluetooth: hci6: command tx timeout
[   66.508744] Bluetooth: hci4: command tx timeout
[   66.572084] Bluetooth: hci5: command tx timeout
[   66.572195] Bluetooth: hci3: command tx timeout
[   66.572613] Bluetooth: hci7: command tx timeout
[   66.573201] Bluetooth: hci2: command tx timeout
[   68.364167] Bluetooth: hci0: command tx timeout
[   68.428715] Bluetooth: hci1: command tx timeout
[   68.555658] Bluetooth: hci6: command tx timeout
[   68.557226] Bluetooth: hci4: command tx timeout
[   68.619129] Bluetooth: hci2: command tx timeout
[   68.619568] Bluetooth: hci3: command tx timeout
[   68.620101] Bluetooth: hci7: command tx timeout
[   68.620491] Bluetooth: hci5: command tx timeout
[   70.411752] Bluetooth: hci0: command tx timeout
[   70.476337] Bluetooth: hci1: command tx timeout
[   70.603162] Bluetooth: hci4: command tx timeout
[   70.603617] Bluetooth: hci6: command tx timeout
[   70.668082] Bluetooth: hci5: command tx timeout
[   70.668528] Bluetooth: hci7: command tx timeout
[   70.668905] Bluetooth: hci3: command tx timeout
[   70.670264] Bluetooth: hci2: command tx timeout
[   72.460181] Bluetooth: hci0: command tx timeout
[   72.523136] Bluetooth: hci1: command tx timeout
[   72.652078] Bluetooth: hci6: command tx timeout
[   72.652494] Bluetooth: hci4: command tx timeout
[   72.716232] Bluetooth: hci3: command tx timeout
[   72.716634] Bluetooth: hci2: command tx timeout
[   72.717011] Bluetooth: hci7: command tx timeout
[   72.717545] Bluetooth: hci5: command tx timeout
[   95.629451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.644240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.520389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.521012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.856358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.856974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.950358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.950979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.270276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.270922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.494878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.495520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.633084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.633666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
19:17:04 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000640))

19:17:04 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000640))

[   98.789270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.789871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
19:17:04 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x30c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb1479818d65a10a87b1fe3135254229cbe40c2461c3ba81659877c3ab997c65"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="987c355f34f04e23da4fb545ef3f3525"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2b5fc186980c30b687476050e5792764"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3e0f65a31122c3a"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c66a8365b40a16669a9e45e0cc78a4f2dc070148985da6dd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9200a9281cd68827c3293aaeaf7ff415"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d90cd86603389706bb9436d9fccdfe9aff552718b44b36b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2cd4d0944fa23a2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c6a1fb0fb86b244b83c3592d7d8b7885"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7735cc225b090545dfb4a0d56d5dd40c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="839d8c0923a4f7615586429c3829ba00"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f41}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="96f71afef45dab303be3614b5b49d7e3a52dc329a6ee5332"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="106b4862c7ab4e7da7e6654d790c5a9ca96991326c0915c883784d26f63c1506"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3f3445824e121fe9d10360070fc9e16d71199d1ecb310a40f004815497d107e0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="393f3ff7e08a56e9f19449b20eb179469af7f143576071a68dd038dd55719f3a"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7929b700de5f1750ee3c6cb4c54d95a1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="991777c0c4ee2db343bdca0a5ab82cb162f0211f21b94c50"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4808e006ec0fd46e92ae02208e69ba25"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb34205bebd30ef6e62fe62d8ce1ddbed0d91a09eab018d7aefcb74cc6cef625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d05ef87b5a3d920b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3981d4693fdd190"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "151e0f0108f618a3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd0394f05aab0427b1df1a84fac83e51550fe8a1e3892277"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3bf6774be1a47d4b2e44a18fb7aa94afedc919359929f2b6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f15fd68f05871ecaf40c42db4e44ef0f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff0000}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efe595d09cd5bd65"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1eccbd893046728c4f95300d9350336d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f4df29a44d95f5e35e4df0b20e44cbae53f553cf92345a92a5cbde75129ae9cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e4b519519a6f6ce3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5a}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cc14d6d97f3ff5d48457cf56a16aecfb"}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

19:17:04 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000640))

19:17:05 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x30c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb1479818d65a10a87b1fe3135254229cbe40c2461c3ba81659877c3ab997c65"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="987c355f34f04e23da4fb545ef3f3525"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2b5fc186980c30b687476050e5792764"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3e0f65a31122c3a"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c66a8365b40a16669a9e45e0cc78a4f2dc070148985da6dd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9200a9281cd68827c3293aaeaf7ff415"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d90cd86603389706bb9436d9fccdfe9aff552718b44b36b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2cd4d0944fa23a2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c6a1fb0fb86b244b83c3592d7d8b7885"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7735cc225b090545dfb4a0d56d5dd40c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="839d8c0923a4f7615586429c3829ba00"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f41}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="96f71afef45dab303be3614b5b49d7e3a52dc329a6ee5332"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="106b4862c7ab4e7da7e6654d790c5a9ca96991326c0915c883784d26f63c1506"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3f3445824e121fe9d10360070fc9e16d71199d1ecb310a40f004815497d107e0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="393f3ff7e08a56e9f19449b20eb179469af7f143576071a68dd038dd55719f3a"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7929b700de5f1750ee3c6cb4c54d95a1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="991777c0c4ee2db343bdca0a5ab82cb162f0211f21b94c50"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4808e006ec0fd46e92ae02208e69ba25"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb34205bebd30ef6e62fe62d8ce1ddbed0d91a09eab018d7aefcb74cc6cef625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d05ef87b5a3d920b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3981d4693fdd190"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "151e0f0108f618a3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd0394f05aab0427b1df1a84fac83e51550fe8a1e3892277"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3bf6774be1a47d4b2e44a18fb7aa94afedc919359929f2b6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f15fd68f05871ecaf40c42db4e44ef0f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff0000}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efe595d09cd5bd65"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1eccbd893046728c4f95300d9350336d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f4df29a44d95f5e35e4df0b20e44cbae53f553cf92345a92a5cbde75129ae9cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e4b519519a6f6ce3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5a}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cc14d6d97f3ff5d48457cf56a16aecfb"}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

19:17:05 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
r6 = socket(0x26, 0x3, 0x7)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000f40))
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:05 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

[   99.358187] audit: type=1400 audit(1768677425.275:8): avc:  denied  { open } for  pid=3886 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
[   99.370163] audit: type=1400 audit(1768677425.278:9): avc:  denied  { kernel } for  pid=3886 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1
19:17:05 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000c80)={0x30c, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb1479818d65a10a87b1fe3135254229cbe40c2461c3ba81659877c3ab997c65"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="987c355f34f04e23da4fb545ef3f3525"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="2b5fc186980c30b687476050e5792764"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d3e0f65a31122c3a"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c66a8365b40a16669a9e45e0cc78a4f2dc070148985da6dd"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9200a9281cd68827c3293aaeaf7ff415"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d90cd86603389706bb9436d9fccdfe9aff552718b44b36b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2cd4d0944fa23a2"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c6a1fb0fb86b244b83c3592d7d8b7885"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7735cc225b090545dfb4a0d56d5dd40c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="839d8c0923a4f7615586429c3829ba00"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f41}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="96f71afef45dab303be3614b5b49d7e3a52dc329a6ee5332"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="106b4862c7ab4e7da7e6654d790c5a9ca96991326c0915c883784d26f63c1506"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3f3445824e121fe9d10360070fc9e16d71199d1ecb310a40f004815497d107e0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="393f3ff7e08a56e9f19449b20eb179469af7f143576071a68dd038dd55719f3a"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7929b700de5f1750ee3c6cb4c54d95a1"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="991777c0c4ee2db343bdca0a5ab82cb162f0211f21b94c50"}]}, @NL80211_ATTR_REKEY_DATA={0xbc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4808e006ec0fd46e92ae02208e69ba25"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fb34205bebd30ef6e62fe62d8ce1ddbed0d91a09eab018d7aefcb74cc6cef625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d05ef87b5a3d920b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3981d4693fdd190"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "151e0f0108f618a3"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cd0394f05aab0427b1df1a84fac83e51550fe8a1e3892277"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3bf6774be1a47d4b2e44a18fb7aa94afedc919359929f2b6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f15fd68f05871ecaf40c42db4e44ef0f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff0000}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "efe595d09cd5bd65"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="1eccbd893046728c4f95300d9350336d"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f4df29a44d95f5e35e4df0b20e44cbae53f553cf92345a92a5cbde75129ae9cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e4b519519a6f6ce3"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5a}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cc14d6d97f3ff5d48457cf56a16aecfb"}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

[   99.493761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.502080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.542548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.543157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.711658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.713853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.859484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.860450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.117785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.118425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.172084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.172662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.212135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.212883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.264500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.265271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
19:17:16 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)

19:17:16 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:16 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001240)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000c40)={0x58c, r2, 0x100, 0x6, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x562, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @random="c4ee6d8efa2b", {0x8, 0xff9}}, @ver_80211n={0x0, 0x5e, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0xb84f6c4fd46a0204, 0x7f, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x6c, "75f8f25127c06c363927fc3649ed754557faaf7359856928f9f6069dad367e324b00fc66d39ab9bc9f2760106ea436ca42b4f210bac01cd51fd71dbd37f2f6d47dcef30dc7fd4b8deb48f23aa82ca1620b12b369ddfd877aa4473f95e1612e2f1a5196138a6c7077f68434aa"}, {0xdd, 0x90, "5abb8d8422a4a26ed748e03d09af2c9f36d087e964799d8687ef98c637829dc5a09c4bc43c1ea81db354581bb9cf41bf5e47b50e026c3071dc6559db45319b60f6e5c955a5e54f51d7c27bfc858ef9cfd1fc215e18e895ca348661ef7bd70ba5a116a23c16dc96c7df3307c889e7359b3e7417bead7a45028efcb2d163694251e266423b37941196b4aae81dfdb98775"}, {0xdd, 0x57, "7af5bfd0a20ab76f757d7efdbbb52f64e31f3652d57f450da1387a9ea3675ab81ca95b15f74d8d6731fe39cd8f67ec8ec35f8a2babc24ce2b3b0e4c1c7bb815e7e5065d81cafeae6cf364656739f6f4e6fd0610794c447"}, {0xdd, 0xd5, "a43f69e202fb52ae0b7ce78a2c93352bc9a4f9d41631a27bf7bd878ff655d4d2a8c7e419d5ddeeade34eaeed453c75944ccd2733bc04d682397a53cf4585fc131b47aa2cc093e640103f74958cb12c5e11bff89fded18a1c993443ec5426ecd7af559a06ea2fb61e036eeda7414f08d812825c6811b22f07fec57e10e4cd7bccb2801682a30168efe93028a48e83323feb03f6b37159a8154e14258b310c085531aa0d142cd0a67e9086a69f4dca1e4099540673a12b2825f2f22066f924fd70a8c6a8c1fb3dc769e7d3882328122343b4a36aa439"}, {0xdd, 0x12, "c3af219ede2a0d4826bd076e10b138f6421e"}, {0xdd, 0x9b, "9ce9658e47c889521d047c5d5a2c2566cd228065c660e89862a09690ce3dceeb435e62711a85c1dcb26eab3374a4e1803230e26248d645d513977615b17a26b657654376de9127cdc7eda86e0023cec563faad8643a1a501af119e7f85073f1837c0a53fbcaab53e74fcc33e98b918dccb460ec03fee13f074e415880aab397189d04fb10ab056936f525bc0714635887e58b704b2b82df0fa17a9"}, {0xdd, 0xd9, "6da8aa04fe6a7820b3cd673d879706e37dfda93c0280aa613d69805b1445c0f08ae50c523af191a0f3dd82768ccde25e681a4a50ac3968260394ff4410bbbc26a6c7e99fd57b4e68bf633753a300afb2bc2bf19b0a7950e2dfbcf707987cc53d1e50b08d768b779f6db04ce8cc08d8d332c7fc99a2ed032ab499cc13c34c0065e394dc4ba07e207c904c7b81d6e9664e83db8d7cd8001581e079f95bcac12bc13149b2316ab0f1afc2d3987322a1c073c60969084a043e9a13854c1853808aaf0db5949a4103fae211f3707f73a514494e6631bb64e4a99fad"}, {0xdd, 0xd5, "08402622e6ac11f70fb2ba14054493efdcd21099a28f465b791695238533821d35a96f5e8b72fd13a4842ce57431c77c5023f85493f3a5be1f4514a4e146b3a84dc60b9b6f2e29084ec17949400ef39cf54889ac44b0d1e4028f8b978b2294a079fbba8a9fb72322622e96d137b5c40742d639cd0a7343b6525592d00bc1cb273cd42853403f5e31870d6f035438640d56ada1506e2b5906bf20988ccc3e57ca7953ae7720fce53c33f7f376cbe0c1f206b66c665e07924df46727e277cd14e569a9728a7696fed1307c6ab9bb3a982f1f79e2caa0"}, {0xdd, 0xa1, "5727b75fc0730b8fb540299f5262f3cf9692cdc8ec318ac876adadaf16dbd715ff0764e27a7393071041e3e33592c4932d7e6a6a7c5f1f3c577ce408a319ddf4595888ffea19db09048d4c3650f9f589d257a8bcf14d202a8b35cd3e24ee6cab9ae826d1e6244365fcd52b376ccbb34afedcf0cae3554377e6e58024783a7437c98eb08d39b4f3092500f4c21ece8121950c40e12bfa74ef61ea41ef121e0fda27"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

19:17:16 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "0ce653f515d9f512d961fb69f8716a517e0cb650c1b312bbc18ba0c38072de4896379016cee2e7e95915cf98748c1845569b78650be3432bba9a842ed172360956d55fb39d60cc4b79fce089acaf7c4a07a02e98e29cb1f2b0f60a006a9b43f06f3b9315f66a93af0a0fa65b2113c7c246fd3cb9ffc630cc7e6642a4761c4d62d7ae472c03cd7cab080c9a8977a5d1c1c1a58abb52bff757075879cbc5399fe5f8beb031f4aa7efcd3d662d6d98e1bb9adb76fe254291816ae857105ac4350020b311c7907537d6005907471ee657be526bfc90c94cb619065b26c43638880c00a4742dd47c3b6df3c5e66811fc933fb5caba2633a1f1ccfe53cf8d030d0b5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c4a867bd56f79515383c4ac6697a99070dd7f0f0e26611091755514863845d2838ec10c2400268c310cac1dcfc3b813b7dcbf4bd7e9674842bd9c7f1c0bb1b9a8da928af8895562638d6cae77e6bb0073c465329a8f844164382ce0a0bc98f47de9546eaa5226d933f0db4e6f4e1163ce009cd99194b1cc34db3db206229a63aedaf69e8431d46b5197e5f79476419ceb38c401c693ea01462b1bf510886c075f98858db3903079f6029e90b59b70180d85cf673a406d11ca41319bb06a49c507b8114c0bf7091773fcc19f04d269ef7b949fc5c92b99c934f9c47168290959c4a49b75e52d7ddd0b659184aa6f492441cbaf0b59850381fe0ee21ac3c070a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "4faaae515413cc109fc3d20c64a98617b0ef6de17274156654f04ae0b7aacebfeb9b4d182dc0ab1bd736cc3fd4205e84b57bf9cb692e56b524280d6f9a0a45bc1edd9444a61915a84e92a06aaf67c28e855bcc7ca2029f21e7ae25954cdbd64545fdc3c3fe26391e9d328dd83409a44f53856e0dea66a84aed1714907dbf7053bf2de4c4e51a2c8821a615ee1d5f6951eee9ea237167aa7e62dca49f4a90d0647d205022952fe36c9dcec51999deea115674066bcd1cfae85664358ddfda167b601d50f31aa2c15697e5095f6d551141d1d1d54f8cf452a1312a18107cb5ae17c87c9b9e1140f091528b72df54d88ea5908e91302290dbb7779c773cdd6dcb"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
r6 = socket(0x26, 0x3, 0x7)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000f40))
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:16 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:16 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "87bc4da7dbc00a4d7781539cd2bfe24f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c890}, 0x4000)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000880))

19:17:16 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000c00)={&(0x7f0000000ac0), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r5, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8004)

19:17:16 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
move_pages(r1, 0xa, &(0x7f0000000a40)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000ac0)=[0x2, 0x7, 0x7fff, 0x7fffffff, 0x7, 0x1ff, 0x3329, 0xfffffffe], &(0x7f0000000b00)=[0x0], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "7a52fb2024c4fe"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x3)

19:17:16 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "87bc4da7dbc00a4d7781539cd2bfe24f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c890}, 0x4000)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000880))

19:17:24 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:24 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)

19:17:24 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "4faaae515413cc109fc3d20c64a98617b0ef6de17274156654f04ae0b7aacebfeb9b4d182dc0ab1bd736cc3fd4205e84b57bf9cb692e56b524280d6f9a0a45bc1edd9444a61915a84e92a06aaf67c28e855bcc7ca2029f21e7ae25954cdbd64545fdc3c3fe26391e9d328dd83409a44f53856e0dea66a84aed1714907dbf7053bf2de4c4e51a2c8821a615ee1d5f6951eee9ea237167aa7e62dca49f4a90d0647d205022952fe36c9dcec51999deea115674066bcd1cfae85664358ddfda167b601d50f31aa2c15697e5095f6d551141d1d1d54f8cf452a1312a18107cb5ae17c87c9b9e1140f091528b72df54d88ea5908e91302290dbb7779c773cdd6dcb"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
r6 = socket(0x26, 0x3, 0x7)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000f40))
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:24 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:24 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "87bc4da7dbc00a4d7781539cd2bfe24f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c890}, 0x4000)
ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000880))

19:17:24 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:24 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001240)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000c40)={0x58c, r2, 0x100, 0x6, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x562, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @random="c4ee6d8efa2b", {0x8, 0xff9}}, @ver_80211n={0x0, 0x5e, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0xb84f6c4fd46a0204, 0x7f, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x6c, "75f8f25127c06c363927fc3649ed754557faaf7359856928f9f6069dad367e324b00fc66d39ab9bc9f2760106ea436ca42b4f210bac01cd51fd71dbd37f2f6d47dcef30dc7fd4b8deb48f23aa82ca1620b12b369ddfd877aa4473f95e1612e2f1a5196138a6c7077f68434aa"}, {0xdd, 0x90, "5abb8d8422a4a26ed748e03d09af2c9f36d087e964799d8687ef98c637829dc5a09c4bc43c1ea81db354581bb9cf41bf5e47b50e026c3071dc6559db45319b60f6e5c955a5e54f51d7c27bfc858ef9cfd1fc215e18e895ca348661ef7bd70ba5a116a23c16dc96c7df3307c889e7359b3e7417bead7a45028efcb2d163694251e266423b37941196b4aae81dfdb98775"}, {0xdd, 0x57, "7af5bfd0a20ab76f757d7efdbbb52f64e31f3652d57f450da1387a9ea3675ab81ca95b15f74d8d6731fe39cd8f67ec8ec35f8a2babc24ce2b3b0e4c1c7bb815e7e5065d81cafeae6cf364656739f6f4e6fd0610794c447"}, {0xdd, 0xd5, "a43f69e202fb52ae0b7ce78a2c93352bc9a4f9d41631a27bf7bd878ff655d4d2a8c7e419d5ddeeade34eaeed453c75944ccd2733bc04d682397a53cf4585fc131b47aa2cc093e640103f74958cb12c5e11bff89fded18a1c993443ec5426ecd7af559a06ea2fb61e036eeda7414f08d812825c6811b22f07fec57e10e4cd7bccb2801682a30168efe93028a48e83323feb03f6b37159a8154e14258b310c085531aa0d142cd0a67e9086a69f4dca1e4099540673a12b2825f2f22066f924fd70a8c6a8c1fb3dc769e7d3882328122343b4a36aa439"}, {0xdd, 0x12, "c3af219ede2a0d4826bd076e10b138f6421e"}, {0xdd, 0x9b, "9ce9658e47c889521d047c5d5a2c2566cd228065c660e89862a09690ce3dceeb435e62711a85c1dcb26eab3374a4e1803230e26248d645d513977615b17a26b657654376de9127cdc7eda86e0023cec563faad8643a1a501af119e7f85073f1837c0a53fbcaab53e74fcc33e98b918dccb460ec03fee13f074e415880aab397189d04fb10ab056936f525bc0714635887e58b704b2b82df0fa17a9"}, {0xdd, 0xd9, "6da8aa04fe6a7820b3cd673d879706e37dfda93c0280aa613d69805b1445c0f08ae50c523af191a0f3dd82768ccde25e681a4a50ac3968260394ff4410bbbc26a6c7e99fd57b4e68bf633753a300afb2bc2bf19b0a7950e2dfbcf707987cc53d1e50b08d768b779f6db04ce8cc08d8d332c7fc99a2ed032ab499cc13c34c0065e394dc4ba07e207c904c7b81d6e9664e83db8d7cd8001581e079f95bcac12bc13149b2316ab0f1afc2d3987322a1c073c60969084a043e9a13854c1853808aaf0db5949a4103fae211f3707f73a514494e6631bb64e4a99fad"}, {0xdd, 0xd5, "08402622e6ac11f70fb2ba14054493efdcd21099a28f465b791695238533821d35a96f5e8b72fd13a4842ce57431c77c5023f85493f3a5be1f4514a4e146b3a84dc60b9b6f2e29084ec17949400ef39cf54889ac44b0d1e4028f8b978b2294a079fbba8a9fb72322622e96d137b5c40742d639cd0a7343b6525592d00bc1cb273cd42853403f5e31870d6f035438640d56ada1506e2b5906bf20988ccc3e57ca7953ae7720fce53c33f7f376cbe0c1f206b66c665e07924df46727e277cd14e569a9728a7696fed1307c6ab9bb3a982f1f79e2caa0"}, {0xdd, 0xa1, "5727b75fc0730b8fb540299f5262f3cf9692cdc8ec318ac876adadaf16dbd715ff0764e27a7393071041e3e33592c4932d7e6a6a7c5f1f3c577ce408a319ddf4595888ffea19db09048d4c3650f9f589d257a8bcf14d202a8b35cd3e24ee6cab9ae826d1e6244365fcd52b376ccbb34afedcf0cae3554377e6e58024783a7437c98eb08d39b4f3092500f4c21ece8121950c40e12bfa74ef61ea41ef121e0fda27"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

19:17:24 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
move_pages(r1, 0xa, &(0x7f0000000a40)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000ac0)=[0x2, 0x7, 0x7fff, 0x7fffffff, 0x7, 0x1ff, 0x3329, 0xfffffffe], &(0x7f0000000b00)=[0x0], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "7a52fb2024c4fe"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x3)

19:17:32 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
move_pages(r1, 0xa, &(0x7f0000000a40)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000ac0)=[0x2, 0x7, 0x7fff, 0x7fffffff, 0x7, 0x1ff, 0x3329, 0xfffffffe], &(0x7f0000000b00)=[0x0], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x78, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "7a52fb2024c4fe"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x804)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x3)

19:17:32 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001240)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000c40)={0x58c, r2, 0x100, 0x6, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x562, 0x33, @assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_a, @broadcast, @random="c4ee6d8efa2b", {0x8, 0xff9}}, @ver_80211n={0x0, 0x5e, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0xb84f6c4fd46a0204, 0x7f, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x6c, "75f8f25127c06c363927fc3649ed754557faaf7359856928f9f6069dad367e324b00fc66d39ab9bc9f2760106ea436ca42b4f210bac01cd51fd71dbd37f2f6d47dcef30dc7fd4b8deb48f23aa82ca1620b12b369ddfd877aa4473f95e1612e2f1a5196138a6c7077f68434aa"}, {0xdd, 0x90, "5abb8d8422a4a26ed748e03d09af2c9f36d087e964799d8687ef98c637829dc5a09c4bc43c1ea81db354581bb9cf41bf5e47b50e026c3071dc6559db45319b60f6e5c955a5e54f51d7c27bfc858ef9cfd1fc215e18e895ca348661ef7bd70ba5a116a23c16dc96c7df3307c889e7359b3e7417bead7a45028efcb2d163694251e266423b37941196b4aae81dfdb98775"}, {0xdd, 0x57, "7af5bfd0a20ab76f757d7efdbbb52f64e31f3652d57f450da1387a9ea3675ab81ca95b15f74d8d6731fe39cd8f67ec8ec35f8a2babc24ce2b3b0e4c1c7bb815e7e5065d81cafeae6cf364656739f6f4e6fd0610794c447"}, {0xdd, 0xd5, "a43f69e202fb52ae0b7ce78a2c93352bc9a4f9d41631a27bf7bd878ff655d4d2a8c7e419d5ddeeade34eaeed453c75944ccd2733bc04d682397a53cf4585fc131b47aa2cc093e640103f74958cb12c5e11bff89fded18a1c993443ec5426ecd7af559a06ea2fb61e036eeda7414f08d812825c6811b22f07fec57e10e4cd7bccb2801682a30168efe93028a48e83323feb03f6b37159a8154e14258b310c085531aa0d142cd0a67e9086a69f4dca1e4099540673a12b2825f2f22066f924fd70a8c6a8c1fb3dc769e7d3882328122343b4a36aa439"}, {0xdd, 0x12, "c3af219ede2a0d4826bd076e10b138f6421e"}, {0xdd, 0x9b, "9ce9658e47c889521d047c5d5a2c2566cd228065c660e89862a09690ce3dceeb435e62711a85c1dcb26eab3374a4e1803230e26248d645d513977615b17a26b657654376de9127cdc7eda86e0023cec563faad8643a1a501af119e7f85073f1837c0a53fbcaab53e74fcc33e98b918dccb460ec03fee13f074e415880aab397189d04fb10ab056936f525bc0714635887e58b704b2b82df0fa17a9"}, {0xdd, 0xd9, "6da8aa04fe6a7820b3cd673d879706e37dfda93c0280aa613d69805b1445c0f08ae50c523af191a0f3dd82768ccde25e681a4a50ac3968260394ff4410bbbc26a6c7e99fd57b4e68bf633753a300afb2bc2bf19b0a7950e2dfbcf707987cc53d1e50b08d768b779f6db04ce8cc08d8d332c7fc99a2ed032ab499cc13c34c0065e394dc4ba07e207c904c7b81d6e9664e83db8d7cd8001581e079f95bcac12bc13149b2316ab0f1afc2d3987322a1c073c60969084a043e9a13854c1853808aaf0db5949a4103fae211f3707f73a514494e6631bb64e4a99fad"}, {0xdd, 0xd5, "08402622e6ac11f70fb2ba14054493efdcd21099a28f465b791695238533821d35a96f5e8b72fd13a4842ce57431c77c5023f85493f3a5be1f4514a4e146b3a84dc60b9b6f2e29084ec17949400ef39cf54889ac44b0d1e4028f8b978b2294a079fbba8a9fb72322622e96d137b5c40742d639cd0a7343b6525592d00bc1cb273cd42853403f5e31870d6f035438640d56ada1506e2b5906bf20988ccc3e57ca7953ae7720fce53c33f7f376cbe0c1f206b66c665e07924df46727e277cd14e569a9728a7696fed1307c6ab9bb3a982f1f79e2caa0"}, {0xdd, 0xa1, "5727b75fc0730b8fb540299f5262f3cf9692cdc8ec318ac876adadaf16dbd715ff0764e27a7393071041e3e33592c4932d7e6a6a7c5f1f3c577ce408a319ddf4595888ffea19db09048d4c3650f9f589d257a8bcf14d202a8b35cd3e24ee6cab9ae826d1e6244365fcd52b376ccbb34afedcf0cae3554377e6e58024783a7437c98eb08d39b4f3092500f4c21ece8121950c40e12bfa74ef61ea41ef121e0fda27"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x58c}, 0x1, 0x0, 0x0, 0x41}, 0x0)

19:17:32 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "87bc4da7dbc00a4d7781539cd2bfe24f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c890}, 0x4000)

19:17:32 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:32 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)

19:17:32 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "0ce653f515d9f512d961fb69f8716a517e0cb650c1b312bbc18ba0c38072de4896379016cee2e7e95915cf98748c1845569b78650be3432bba9a842ed172360956d55fb39d60cc4b79fce089acaf7c4a07a02e98e29cb1f2b0f60a006a9b43f06f3b9315f66a93af0a0fa65b2113c7c246fd3cb9ffc630cc7e6642a4761c4d62d7ae472c03cd7cab080c9a8977a5d1c1c1a58abb52bff757075879cbc5399fe5f8beb031f4aa7efcd3d662d6d98e1bb9adb76fe254291816ae857105ac4350020b311c7907537d6005907471ee657be526bfc90c94cb619065b26c43638880c00a4742dd47c3b6df3c5e66811fc933fb5caba2633a1f1ccfe53cf8d030d0b5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
r6 = socket(0x26, 0x3, 0x7)
sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:32 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:32 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000044}, 0x4040010)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:32 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))
socket$nl_generic(0x10, 0x3, 0x10)

19:17:32 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8}, @val={0xc, 0x99, {0xf9, 0x21}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10000}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:32 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:32 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000740))

19:17:32 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "0ce653f515d9f512d961fb69f8716a517e0cb650c1b312bbc18ba0c38072de4896379016cee2e7e95915cf98748c1845569b78650be3432bba9a842ed172360956d55fb39d60cc4b79fce089acaf7c4a07a02e98e29cb1f2b0f60a006a9b43f06f3b9315f66a93af0a0fa65b2113c7c246fd3cb9ffc630cc7e6642a4761c4d62d7ae472c03cd7cab080c9a8977a5d1c1c1a58abb52bff757075879cbc5399fe5f8beb031f4aa7efcd3d662d6d98e1bb9adb76fe254291816ae857105ac4350020b311c7907537d6005907471ee657be526bfc90c94cb619065b26c43638880c00a4742dd47c3b6df3c5e66811fc933fb5caba2633a1f1ccfe53cf8d030d0b5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c4a867bd56f79515383c4ac6697a99070dd7f0f0e26611091755514863845d2838ec10c2400268c310cac1dcfc3b813b7dcbf4bd7e9674842bd9c7f1c0bb1b9a8da928af8895562638d6cae77e6bb0073c465329a8f844164382ce0a0bc98f47de9546eaa5226d933f0db4e6f4e1163ce009cd99194b1cc34db3db206229a63aedaf69e8431d46b5197e5f79476419ceb38c401c693ea01462b1bf510886c075f98858db3903079f6029e90b59b70180d85cf673a406d11ca41319bb06a49c507b8114c0bf7091773fcc19f04d269ef7b949fc5c92b99c934f9c47168290959c4a49b75e52d7ddd0b659184aa6f492441cbaf0b59850381fe0ee21ac3c070a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "4faaae515413cc109fc3d20c64a98617b0ef6de17274156654f04ae0b7aacebfeb9b4d182dc0ab1bd736cc3fd4205e84b57bf9cb692e56b524280d6f9a0a45bc1edd9444a61915a84e92a06aaf67c28e855bcc7ca2029f21e7ae25954cdbd64545fdc3c3fe26391e9d328dd83409a44f53856e0dea66a84aed1714907dbf7053bf2de4c4e51a2c8821a615ee1d5f6951eee9ea237167aa7e62dca49f4a90d0647d205022952fe36c9dcec51999deea115674066bcd1cfae85664358ddfda167b601d50f31aa2c15697e5095f6d551141d1d1d54f8cf452a1312a18107cb5ae17c87c9b9e1140f091528b72df54d88ea5908e91302290dbb7779c773cdd6dcb"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket(0x26, 0x3, 0x7)
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:32 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:32 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:32 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000880)='bic\x00', 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:32 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
move_pages(r1, 0xa, &(0x7f0000000a40)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000ac0)=[0x2, 0x7, 0x7fff, 0x7fffffff, 0x7, 0x1ff, 0x3329, 0xfffffffe], &(0x7f0000000b00)=[0x0], 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='blkio.bfq.idle_time\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x3)

19:17:32 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:32 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000700))

19:17:32 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000ac0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:32 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:32 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
move_pages(r1, 0xa, &(0x7f0000000a40)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000ac0)=[0x2, 0x7, 0x7fff, 0x7fffffff, 0x7, 0x1ff, 0x3329, 0xfffffffe], &(0x7f0000000b00)=[0x0], 0x0)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:32 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:40 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:40 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:40 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:40 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:40 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, r2)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:40 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:40 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3)

19:17:40 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "4faaae515413cc109fc3d20c64a98617b0ef6de17274156654f04ae0b7aacebfeb9b4d182dc0ab1bd736cc3fd4205e84b57bf9cb692e56b524280d6f9a0a45bc1edd9444a61915a84e92a06aaf67c28e855bcc7ca2029f21e7ae25954cdbd64545fdc3c3fe26391e9d328dd83409a44f53856e0dea66a84aed1714907dbf7053bf2de4c4e51a2c8821a615ee1d5f6951eee9ea237167aa7e62dca49f4a90d0647d205022952fe36c9dcec51999deea115674066bcd1cfae85664358ddfda167b601d50f31aa2c15697e5095f6d551141d1d1d54f8cf452a1312a18107cb5ae17c87c9b9e1140f091528b72df54d88ea5908e91302290dbb7779c773cdd6dcb"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket(0x26, 0x3, 0x7)
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:40 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
pkey_alloc(0x0, 0x0)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:40 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:40 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:17:40 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:47 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:47 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:47 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:17:47 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:47 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:47 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:47 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:47 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:48 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:48 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000009c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/210, 0xd2, 0x1, &(0x7f0000000980)}, &(0x7f0000000a00)=0x40)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:48 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000700)='cgroup.freeze\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:48 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:48 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:17:48 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:56 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:56 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:17:56 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:56 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:56 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:56 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
r1 = clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
move_pages(r1, 0x1, &(0x7f00000007c0)=[&(0x7f0000ff6000/0x4000)=nil], &(0x7f0000000800)=[0x80, 0xfffffffe, 0xcee7, 0x0, 0x0, 0x7, 0x6, 0x4], &(0x7f0000000840)=[0x0, 0x0], 0x2)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:56 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:56 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:56 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:56 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:17:56 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:56 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
clone3(&(0x7f0000000740)={0x1010a0100, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x1a}, &(0x7f0000000540)=""/145, 0x91, &(0x7f0000000600)=""/221, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:17:56 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d40)={'wlan1\x00'})
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:56 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:17:56 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000680)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:17:56 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r2, 0x108, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x5c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x1c, 0x34, @random="ba7bf26cb937209162d5e6a29d4fce7f9ce01998017a3342"}, @NL80211_ATTR_SSID={0xd, 0x34, @random="ce501d4e1dbd3e8a48"}]}, 0x60}}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:17:56 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:17:56 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:17:56 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0xfc, 0x9, @buffer={0x0, 0x4b, &(0x7f0000000200)=""/75}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/105, 0x4, 0x20, 0x0, &(0x7f0000000400)})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:17:56 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:17:56 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x44}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x4ee}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMKID={0x14, 0x55, "d19874d367cedb2da1d7be0bda1a75b4"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:04 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, 0xffffffffffffffff, 0x8000000)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:04 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x90, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc70, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c3248d8eb59e"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="24ce75ba15f6"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x43, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1}}, @mic={0x8c, 0x10, {0x66, "59154f82b5d4", @short="b01f07386637f677"}}, @prep={0x83, 0x25, @ext={{}, 0x1, 0x7f, @device_b, 0x8, @device_a, 0xa4a2, 0x0, @broadcast, 0x1}}, @sec_chan_ofs={0x3e, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000084}, 0x24000001)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:18:04 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
r4 = clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r6, &(0x7f0000000540)=""/160, 0xa0)
perf_event_open(&(0x7f0000000600)={0x0, 0x80, 0x7, 0x1, 0x2, 0xd2, 0x0, 0x3, 0x100, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x8001}, 0x1, 0x3ff, 0x2, 0x4, 0x80000000, 0xffff5a3f, 0x9, 0x0, 0x0, 0x0, 0xc3e0}, r4, 0x1, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r8, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:04 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000700), 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:04 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:18:04 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000001c0))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:04 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:18:04 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "afac17bb6a930583026b9af76541e4533aaf186d28a4c9c476b94d014575751e8f09a5c1a23aeb19da65eded3b277e9d69dddba23ffc30fda1981deccae60f95145ca3179dbce0fe8f63fb05223a9000d3e08a3bda278a04139b07d08c2eddfa9fcda3fb4215f7600d4f35bafb5269fe1239fe8ccafc7c17e41b0924ef66cb9b5702442aa5ea2161efc3c788087fe727f9a06a996d2dd858405fb2b4fc590411793ae9b60016ba26509064a73f0e1536b18e00bc3aef8198fb4c1a9475c1a57d1a91ba160780da2005e444d7bb0bbf38afd2efa653a06fc25ea60a5c144bdc7a432d09dd4ee7bef52abf50ddab842e4fe3794ea9609b33aaee8939104e93c9"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c4a867bd56f79515383c4ac6697a99070dd7f0f0e26611091755514863845d2838ec10c2400268c310cac1dcfc3b813b7dcbf4bd7e9674842bd9c7f1c0bb1b9a8da928af8895562638d6cae77e6bb0073c465329a8f844164382ce0a0bc98f47de9546eaa5226d933f0db4e6f4e1163ce009cd99194b1cc34db3db206229a63aedaf69e8431d46b5197e5f79476419ceb38c401c693ea01462b1bf510886c075f98858db3903079f6029e90b59b70180d85cf673a406d11ca41319bb06a49c507b8114c0bf7091773fcc19f04d269ef7b949fc5c92b99c934f9c47168290959c4a49b75e52d7ddd0b659184aa6f492441cbaf0b59850381fe0ee21ac3c070a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:04 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, 0x0, 0xf00, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TESTDATA={0x3e, 0x45, "631b509da93d2fdebb1b9c61799e3287f9bc34f700f95157cccb85aac484aeaa0bd356fc9f56c8d68f6523637fa0e95aab4d880ed17635cfcbaf"}, @NL80211_ATTR_TESTDATA={0x6b, 0x45, "540e6ab9f263e482089ba14516510f7111fc2e635205f1f595885c6056ded548b026dc019f2ec078e9ef34ee7c48b5adc9f99aa995664bb9760044929aff48a6822c1da43e2875e444feb1fbbe5112f5b3200d02e6475fdf81cfc7ce2af18632f288de55a3db1a"}, @NL80211_ATTR_TESTDATA={0x26, 0x45, "07a6d6d31f773ccb938a1f370b718ac1a42a89e3fff5a32a10acf4ab81ee9550e055"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x2041044)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:04 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:04 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "0ce653f515d9f512d961fb69f8716a517e0cb650c1b312bbc18ba0c38072de4896379016cee2e7e95915cf98748c1845569b78650be3432bba9a842ed172360956d55fb39d60cc4b79fce089acaf7c4a07a02e98e29cb1f2b0f60a006a9b43f06f3b9315f66a93af0a0fa65b2113c7c246fd3cb9ffc630cc7e6642a4761c4d62d7ae472c03cd7cab080c9a8977a5d1c1c1a58abb52bff757075879cbc5399fe5f8beb031f4aa7efcd3d662d6d98e1bb9adb76fe254291816ae857105ac4350020b311c7907537d6005907471ee657be526bfc90c94cb619065b26c43638880c00a4742dd47c3b6df3c5e66811fc933fb5caba2633a1f1ccfe53cf8d030d0b5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:04 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$netlink(0x10, 0x3, 0x1)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x198, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x130, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7ff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1920}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1c000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x685cd4f9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3aa4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x743d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}]}, 0x198}, 0x1, 0x0, 0x0, 0x50}, 0x1084)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:04 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:18:04 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:12 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:18:12 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:12 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:12 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:18:12 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r5, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:18:12 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket(0x22, 0x1, 0x1)
getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:12 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
socket$netlink(0x10, 0x3, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:12 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
read$ptp(r5, &(0x7f0000000540)=""/160, 0xa0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:12 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:12 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:12 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x7fff}}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:12 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
move_pages(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f0000000040)=[0x0], 0x5)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:12 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c4a867bd56f79515383c4ac6697a99070dd7f0f0e26611091755514863845d2838ec10c2400268c310cac1dcfc3b813b7dcbf4bd7e9674842bd9c7f1c0bb1b9a8da928af8895562638d6cae77e6bb0073c465329a8f844164382ce0a0bc98f47de9546eaa5226d933f0db4e6f4e1163ce009cd99194b1cc34db3db206229a63aedaf69e8431d46b5197e5f79476419ceb38c401c693ea01462b1bf510886c075f98858db3903079f6029e90b59b70180d85cf673a406d11ca41319bb06a49c507b8114c0bf7091773fcc19f04d269ef7b949fc5c92b99c934f9c47168290959c4a49b75e52d7ddd0b659184aa6f492441cbaf0b59850381fe0ee21ac3c070a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
socket(0x22, 0x1, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:12 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:18:12 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:12 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:20 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ff6000/0x3000)=nil)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:20 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "afac17bb6a930583026b9af76541e4533aaf186d28a4c9c476b94d014575751e8f09a5c1a23aeb19da65eded3b277e9d69dddba23ffc30fda1981deccae60f95145ca3179dbce0fe8f63fb05223a9000d3e08a3bda278a04139b07d08c2eddfa9fcda3fb4215f7600d4f35bafb5269fe1239fe8ccafc7c17e41b0924ef66cb9b5702442aa5ea2161efc3c788087fe727f9a06a996d2dd858405fb2b4fc590411793ae9b60016ba26509064a73f0e1536b18e00bc3aef8198fb4c1a9475c1a57d1a91ba160780da2005e444d7bb0bbf38afd2efa653a06fc25ea60a5c144bdc7a432d09dd4ee7bef52abf50ddab842e4fe3794ea9609b33aaee8939104e93c9"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "0ce653f515d9f512d961fb69f8716a517e0cb650c1b312bbc18ba0c38072de4896379016cee2e7e95915cf98748c1845569b78650be3432bba9a842ed172360956d55fb39d60cc4b79fce089acaf7c4a07a02e98e29cb1f2b0f60a006a9b43f06f3b9315f66a93af0a0fa65b2113c7c246fd3cb9ffc630cc7e6642a4761c4d62d7ae472c03cd7cab080c9a8977a5d1c1c1a58abb52bff757075879cbc5399fe5f8beb031f4aa7efcd3d662d6d98e1bb9adb76fe254291816ae857105ac4350020b311c7907537d6005907471ee657be526bfc90c94cb619065b26c43638880c00a4742dd47c3b6df3c5e66811fc933fb5caba2633a1f1ccfe53cf8d030d0b5"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000c40)=0x8, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:20 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:20 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:20 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:18:20 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
r3 = syz_open_dev$sg(&(0x7f0000000380), 0x80000000, 0x20002)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r4 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f00000005c0))

19:18:20 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:20 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:18:20 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:20 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000540)={0x664, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_NAN_FUNC={0x178, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc6ec}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x148, 0xd, 0x0, 0x1, [{0x32, 0x0, "0433b524cef122479d6f1beaef7d289f2ac1b018198b56d1bc6e3aaa8ecad85ddcb38e08e457a0ee2c547ca9a321"}, {0x36, 0x0, "4017936cd814e5e3848a94e86cee14cd970320a6ff8397c91c8f454793656ccdf8a8fde7f4b94b59afe7ea06324e56191b55"}, {0xd5, 0x0, "5a711ff26dcca01595e6a4e39fb1096ae756a21caf5e8aa6f656f0931be6c4f49694ca5aa462110443df8093ec4b754f0c64ac4bc030087ea1acd07565092c8911071547b18f015b63c323dc32abbb5370cc7f3006dcabb09175d02bfd44923c1dc197db323047e8c358bca140ff317460a61cd78428cb8ff76e4e887051d225ce0577cae558f095f8c9ff79d2515d9fa464b996fd4991c4c471d79f703b541e4293c71cb0837ebb39e9eb43ebf7565dab64dda6e4a807af8689d55af234939099da6d69d87f7fa1b859caf082eb3df1c0"}]}, @NL80211_NAN_FUNC_SRF={0x14, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x10, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x80}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0x20, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "a5ea00c956cd"}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xfb}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x81}]}, @NL80211_ATTR_NAN_FUNC={0x324, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "43b68fa965fc"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_SRF={0x310, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF={0x103, 0x2, "c4a867bd56f79515383c4ac6697a99070dd7f0f0e26611091755514863845d2838ec10c2400268c310cac1dcfc3b813b7dcbf4bd7e9674842bd9c7f1c0bb1b9a8da928af8895562638d6cae77e6bb0073c465329a8f844164382ce0a0bc98f47de9546eaa5226d933f0db4e6f4e1163ce009cd99194b1cc34db3db206229a63aedaf69e8431d46b5197e5f79476419ceb38c401c693ea01462b1bf510886c075f98858db3903079f6029e90b59b70180d85cf673a406d11ca41319bb06a49c507b8114c0bf7091773fcc19f04d269ef7b949fc5c92b99c934f9c47168290959c4a49b75e52d7ddd0b659184aa6f492441cbaf0b59850381fe0ee21ac3c070a"}]}]}, @NL80211_ATTR_NAN_FUNC={0x14c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x120, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0xe0}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x9}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1f}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x4}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x20}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x7}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x3c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x8}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x1}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xf8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "ca1af79d34a6"}, @NL80211_NAN_FUNC_TYPE={0x5}]}]}, 0x664}, 0x1, 0x0, 0x0, 0x20000854}, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:20 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:20 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:20 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x1, 0x51, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:20 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x34}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r3 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000005c0))

19:18:20 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x42, 0x0, "d765b9ef5397ffc658479d334c8689d4d9acec8effc8e14c341fe5bea64598e91c58475271aa8d94699b6621df91aefde76af69fbc2b0e1095d3be2a71c0579861811294003f428ea595592d35002001"}, 0xd8)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:27 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:27 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000180)="d75f49340048dadba63e8ff040c99f40", 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:27 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r3 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000005c0))

19:18:27 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:27 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:27 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r2, 0x400, 0x70bd2a, 0x80000000, {{}, {@void, @val={0xc, 0x99, {0x0, 0xb}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:18:27 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:27 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r6)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:18:27 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f39a18b7e64151d2d6c8a90a99"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e5eb7281b8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "f9dbfb8ea1989baf15"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4cb813a6f8"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000010}, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:27 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:27 executing program 0:
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5, 0x10010, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:27 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:27 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}}, 0x46800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r6, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:27 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:27 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000005c0))

19:18:27 executing program 1:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:27 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:18:27 executing program 0:
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

19:18:28 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000080))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:28 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000090)
r2 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:28 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000005c0))

19:18:28 executing program 0:
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

19:18:28 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:18:28 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})

19:18:28 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000040))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

[  182.358153] 
[  182.358470] =====================================
[  182.359180] WARNING: bad unlock balance detected!
[  182.359898] 6.19.0-rc5-next-20260116 #1 Not tainted
[  182.360611] -------------------------------------
[  182.361291] syz-executor.5/4479 is trying to release lock (rcu_read_lock) at:
[  182.362324] [<ffffffff81c1dee5>] __wait_on_freeing_inode+0x105/0x350
[  182.365444] but there are no more locks to release!
[  182.369007] 
[  182.369007] other info that might help us debug this:
[  182.370832] 4 locks held by syz-executor.5/4479:
[  182.371529]  #0: ffff88800f71c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400
[  182.372838]  #1: ffff88800977aa00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400
[  182.374270]  #2: ffff88800f5d8950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0
[  182.375553]  #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890
[  182.376876] 
[  182.376876] stack backtrace:
[  182.377534] CPU: 0 UID: 0 PID: 4479 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  182.377559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  182.377572] Call Trace:
[  182.377579]  <TASK>
[  182.377587]  dump_stack_lvl+0xca/0x120
[  182.377630]  ? __wait_on_freeing_inode+0x105/0x350
[  182.377656]  print_unlock_imbalance_bug+0x118/0x130
[  182.377682]  ? __wait_on_freeing_inode+0x105/0x350
[  182.377708]  lock_release+0x1ee/0x270
[  182.377735]  __wait_on_freeing_inode+0x10a/0x350
[  182.377763]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  182.377791]  ? __pfx_var_wake_function+0x10/0x10
[  182.377823]  ? lock_is_held_type+0x9e/0x120
[  182.377844]  insert_inode_locked+0x25f/0x890
[  182.377875]  __ext4_new_inode+0x223d/0x4cd0
[  182.377906]  ? __pfx___ext4_new_inode+0x10/0x10
[  182.377932]  ? __pfx___dquot_initialize+0x10/0x10
[  182.377965]  ? __pfx_avc_has_perm+0x10/0x10
[  182.377993]  ext4_symlink+0x623/0xb40
[  182.378027]  ? __pfx_ext4_symlink+0x10/0x10
[  182.378055]  ? security_inode_permission+0x72/0xe0
[  182.378080]  vfs_symlink+0x44b/0x840
[  182.378109]  filename_symlinkat+0x158/0x440
[  182.378135]  ? __pfx_filename_symlinkat+0x10/0x10
[  182.378160]  ? strncpy_from_user+0x21b/0x2f0
[  182.378190]  __x64_sys_symlink+0x82/0x110
[  182.378215]  do_syscall_64+0xbf/0x420
[  182.378238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.378261] RIP: 0033:0x7f55500e3427
[  182.378277] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  182.378297] RSP: 002b:00007ffd569c8fb8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  182.378317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f55500e3427
[  182.378330] RDX: ffffffffffffffbc RSI: 00007f555013e00e RDI: 00007f555013d1dd
[  182.378344] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd569c8a30
[  182.378357] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  182.378370] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd569c9080
[  182.378389]  </TASK>
[  182.408196] ------------[ cut here ]------------
[  182.408881] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.5/4479
[  182.412777] Modules linked in:
[  182.413365] CPU: 0 UID: 0 PID: 4479 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) 
[  182.414904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  182.416191] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0
[  182.417120] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9
[  182.419805] RSP: 0018:ffff88804745f9a0 EFLAGS: 00010286
[  182.420643] RAX: 00000000ffffffff RBX: ffff8880404b1b80 RCX: ffffffff815660f7
[  182.421735] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880404b1f7c
[  182.422861] RBP: ffff8880404b1b80 R08: 0000000000000000 R09: fffffbfff0ba7040
[  182.423982] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880404b1b80
[  182.425159] R13: 0000000000000001 R14: ffffffff85c0d650 R15: ffff888030d558e0
[  182.426280] FS:  0000555558572400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000
[  182.427504] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  182.428431] CR2: 000055555ceb4c58 CR3: 000000003feab000 CR4: 0000000000350ef0
[  182.429540] Call Trace:
[  182.429979]  <TASK>
[  182.431316]  __wait_on_freeing_inode+0x10f/0x350
[  182.432610]  ? __pfx___wait_on_freeing_inode+0x10/0x10
[  182.434648]  ? __pfx_var_wake_function+0x10/0x10
[  182.436976]  ? lock_is_held_type+0x9e/0x120
[  182.439132]  insert_inode_locked+0x25f/0x890
[  182.442213]  __ext4_new_inode+0x223d/0x4cd0
[  182.446860]  ? __pfx___ext4_new_inode+0x10/0x10
[  182.449236]  ? __pfx___dquot_initialize+0x10/0x10
[  182.450689]  ? __pfx_avc_has_perm+0x10/0x10
[  182.454036]  ext4_symlink+0x623/0xb40
[  182.458348]  ? __pfx_ext4_symlink+0x10/0x10
[  182.460309]  ? security_inode_permission+0x72/0xe0
[  182.463437]  vfs_symlink+0x44b/0x840
[  182.465828]  filename_symlinkat+0x158/0x440
[  182.467957]  ? __pfx_filename_symlinkat+0x10/0x10
[  182.469496]  ? strncpy_from_user+0x21b/0x2f0
[  182.473004]  __x64_sys_symlink+0x82/0x110
[  182.474434]  do_syscall_64+0xbf/0x420
[  182.475921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.476918] RIP: 0033:0x7f55500e3427
[  182.477652] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  182.480302] RSP: 002b:00007ffd569c8fb8 EFLAGS: 00000202 ORIG_RAX: 0000000000000058
[  182.481456] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f55500e3427
[  182.482544] RDX: ffffffffffffffbc RSI: 00007f555013e00e RDI: 00007f555013d1dd
[  182.486662] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffd569c8a30
[  182.490026] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  182.491201] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffd569c9080
[  182.496150]  </TASK>
[  182.496498] irq event stamp: 1009
[  182.496993] hardirqs last  enabled at (1009): [<ffffffff84ced36b>] irqentry_exit+0x17b/0x650
[  182.498457] hardirqs last disabled at (1008): [<ffffffff84cec06f>] sysvec_apic_timer_interrupt+0xf/0x80
[  182.499979] softirqs last  enabled at (1002): [<ffffffff812cda79>] kernel_fpu_end+0x59/0x70
[  182.501425] softirqs last disabled at (1000): [<ffffffff812ce94b>] kernel_fpu_begin_mask+0x1bb/0x300
[  182.502906] ---[ end trace 0000000000000000 ]---
[  187.788355] Bluetooth: hci7: command 0x0406 tx timeout
[  187.789672] Bluetooth: hci1: command 0x0406 tx timeout
[  187.790659] Bluetooth: hci4: command 0x0406 tx timeout
[  187.791729] Bluetooth: hci0: command 0x0406 tx timeout
[  187.792702] Bluetooth: hci6: command 0x0406 tx timeout
[  187.793772] Bluetooth: hci3: command 0x0406 tx timeout
[  187.794868] Bluetooth: hci2: command 0x0406 tx timeout
[  187.795947] Bluetooth: hci5: command 0x0406 tx timeout
19:18:36 executing program 3:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
getpid()
r2 = getpid()
r3 = getpid()
clone3(&(0x7f0000000280)={0x204000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, &(0x7f00000000c0)=""/144, 0x90, &(0x7f0000000180)=""/144, &(0x7f0000000240)=[r2, r3, r0, r0, r0], 0x5}, 0x58)
move_pages(r1, 0x6, &(0x7f0000000300)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000340)=[0x5956, 0x2, 0x3, 0x4, 0x4, 0x70c, 0x1, 0x1000], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x2)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x400, 0x0)
ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r5)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x34, r7, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x21}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x8000)

19:18:36 executing program 7:
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @multicast2}}, 0x0, 0x0, 0x19, 0x0, "e86b1a6d96f322c59eba2e163c9d2f67240d43644c6d9c8b8d69cc63655b96abaf2c6fdf6fc9c4874c30805fab1d710dd7e6bad1edb65693ee50525290c4e047e51365fd12198614ff84c87b34fc4b9f"}, 0xd8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x303}, "cd723c324357e019", "ee2c02b9a5b3e42ca61eb195571e2fdbc07335335da54c989d051d1f735a88eb", "7f7d3eb2", "4e1e5d13d2d499c7"}, 0x38)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x43}, 0x40)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x42240869}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20048000)
socket$inet_tcp(0x2, 0x1, 0x0)

19:18:36 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})

19:18:36 executing program 0:
mmap$binder(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

19:18:36 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x90000)
ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000000c0))
syz_io_uring_setup(0x7000, &(0x7f0000000100)={0x0, 0xf20a, 0x20, 0x2, 0x31f, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000200))
ioctl$SCSI_IOCTL_SYNC(r1, 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2)
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000003c0)=0x1)
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000400))
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40850)
r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='net_prio.prioidx\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000005c0))

19:18:36 executing program 6:
ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20048004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xf8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xeae9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffff5a}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x26}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x400}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x18}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x400}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080)

19:18:36 executing program 5:
r0 = getuid()
setresuid(0xee01, r0, 0x0)
getuid()
getuid()
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r2 = syz_io_uring_setup(0x21d9, &(0x7f0000000100)={0x0, 0xf883, 0x20, 0x3, 0x3c7}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x50, 0x0, "d0430a6860f613422d2131aa5e8348e2bd5d527fa950d5aed8586160ecfd0f9f35fe5f87121680213d929f050dd960e94e609bb8773f29c4e66e5d19a7a976403761c6c61bbcfb1c6c9ec694022e397b"}, 0xd8)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000006, 0x100010, r2, 0x10000000)
r3 = syz_io_uring_setup(0x3a16, &(0x7f0000000300)={0x0, 0x97f3, 0x2, 0x1, 0x69, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x30, r3, 0x0)
r4 = io_uring_setup(0x73e7, &(0x7f0000000400)={0x0, 0x84aa, 0x0, 0x1, 0x17a, 0x0, r1})
mmap$IORING_OFF_CQ_RING(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0, 0x30, r4, 0x8000000)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00'})

19:18:36 executing program 4:
r0 = socket(0x25, 0x800, 0x2)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x3a}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "d932dd34a9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ac13d619778637cb126e677290"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a6bbc315eb"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x60, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9f3070ae17"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0c928523962da6a5fb98a0c44e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x4088881)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40840)
r3 = syz_io_uring_setup(0x57cf, &(0x7f0000000380)={0x0, 0x4ffa, 0x8, 0x1, 0x276, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000440))
mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r3, 0x10000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan1\x00'})


VM DIAGNOSIS:
19:18:28  Registers:
info registers vcpu 0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804745f4a8
R8 =0000000000000000 R9 =ffffed1001765046 R10=0000000000000033 R11=0000000020747562
R12=0000000000000033 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120
RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000555558572400 00000000 00000000
GS =0000 ffff8880e5342000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555ceb4c58 CR3=000000003feab000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11
RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888043d2f950
R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000
R12=1ffff110087a5f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888043d2f988
RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558c48f400 00000000 00000000
GS =0000 ffff8880e5442000 00000000 00000000
LDT=0000 fffffe7400000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f356a6b0019 CR3=0000000047733000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11
XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000
XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000